ServicingCommon.dll

Description: Servicing Base DLL

Version: 10.0.22621.5040

Architecture: Unknown (0xaa64)

Operating System: Windows NT

SHA256: 4a53670447b126910def550762fcbab2

File Size: 1.7 MB

Uploaded At: Dec. 3, 2025, 2:36 a.m.

Views: 6

Exported Functions

CBSWdsLog (Ordinal: 1, Address: 0x19050)
CreateKeyformFromAttributesIntoBuffer (Ordinal: 2, Address: 0x656e0)
RecursiveCopy (Ordinal: 3, Address: 0x1a060)
SetCustomLogging (Ordinal: 4, Address: 0x17900)
BeginFileMapEnumerationInternal (Ordinal: 5, Address: 0x6dad0)
CbsCreateOfflineSession (Ordinal: 6, Address: 0x36b0)
CbsCreateOfflineSessionFromStackInImage (Ordinal: 7, Address: 0x9e60)
CbsFindServicingStackDirectory (Ordinal: 8, Address: 0x3360)
CbsGetSsBinaryPathFromTargetImage (Ordinal: 9, Address: 0x9ea0)
CbsLoadSssFromTargetImage (Ordinal: 10, Address: 0x9e80)
CbsOfflineFinalize (Ordinal: 11, Address: 0x36d0)
CbsOfflineFinalizeNoShutdownImageStack (Ordinal: 12, Address: 0x36e0)
CbsOfflineSetLogFile (Ordinal: 13, Address: 0xb00a0)
CbsShutdownImageStack (Ordinal: 14, Address: 0x9e50)
CloseFileMapEnumerationInternal (Ordinal: 15, Address: 0x6dec0)
CompareObjectSDToSddl (Ordinal: 16, Address: 0x6e7f0)
ConvertHResultToNtStatus (Ordinal: 17, Address: 0x11b090)
ConvertNtStatusToHResult (Ordinal: 18, Address: 0x11ab10)
DecompressManifest (Ordinal: 19, Address: 0x669b0)
EstimateReconstructWindowsDiskNeeds (Ordinal: 20, Address: 0xd680)
EstimateReconstructWindowsRAMNeeds (Ordinal: 21, Address: 0xda00)
FileVersionFromString (Ordinal: 22, Address: 0x1a3f0)
GetCWcpDll (Ordinal: 23, Address: 0x65210)
GetIdentityAuthority (Ordinal: 24, Address: 0x70d50)
GetLoadedHiveKeyName (Ordinal: 25, Address: 0x62fc0)
GetNextFileMapContentInternal (Ordinal: 26, Address: 0x6df60)
GetTemporaryPath (Ordinal: 27, Address: 0x63580)
GetUpdateReserveManagerLoader (Ordinal: 28, Address: 0x6cae0)
IsKeyProtected (Ordinal: 29, Address: 0x6efd0)
IsLuaCdfFile (Ordinal: 30, Address: 0x6df70)
LoadUpdateReserveManager (Ordinal: 31, Address: 0x6cbf0)
ReconstructWindowsEx (Ordinal: 32, Address: 0xda40)
ReconstructWindowsEx2 (Ordinal: 33, Address: 0xda90)
RemoveFileProtection (Ordinal: 34, Address: 0x6f4e0)
RemoveRegKeyProtection (Ordinal: 35, Address: 0x6fc80)
RtlAllocateLBlob (Ordinal: 36, Address: 0x59ee0)
RtlAllocateLUnicodeString (Ordinal: 37, Address: 0x5b7a0)
RtlAllocateLUtf8String (Ordinal: 38, Address: 0x5fe60)
RtlAllocateUnicodeString (Ordinal: 39, Address: 0x5b690)
RtlAppendLUnicodeStringToLUnicodeString (Ordinal: 40, Address: 0x5c610)
RtlAppendLUtf8StringToLUtf8String (Ordinal: 41, Address: 0x5eed0)
RtlAppendUcsCharacterToLUnicodeString (Ordinal: 42, Address: 0x5d8e0)
RtlAppendUcsCharacterToLUtf8String (Ordinal: 43, Address: 0x5f070)
RtlAppendUcsCharactersToLUnicodeString (Ordinal: 44, Address: 0x5d700)
RtlBase64EncodeLBlobToLUnicodeString (Ordinal: 45, Address: 0x58ad0)
RtlBase64EncodeLBlobToLUtf8String (Ordinal: 46, Address: 0x58cd0)
RtlCalculateUtf16StringLengthFromLUtf8String (Ordinal: 47, Address: 0x5fc70)
RtlCommitSmartLBlobUcsWritingContext (Ordinal: 48, Address: 0xc2760)
RtlCommitSmartLBlobWritingContext (Ordinal: 49, Address: 0xc2760)
RtlCompareEncodedLBlobs (Ordinal: 50, Address: 0x5a740)
RtlCompareLUnicodeStringToLUtf8String (Ordinal: 51, Address: 0x5fe90)
RtlCompareLUnicodeStrings (Ordinal: 52, Address: 0x5bca0)
RtlCompareLUtf8StringToLUnicodeString (Ordinal: 53, Address: 0x5e990)
RtlCompareLUtf8Strings (Ordinal: 54, Address: 0x5fe70)
RtlConcatenateLUnicodeStrings (Ordinal: 55, Address: 0x5c390)
RtlConcatenateLUtf8Strings (Ordinal: 56, Address: 0x5ec30)
RtlConvertNtFilePathToWin32FilePath (Ordinal: 57, Address: 0x613c0)
RtlConvertNtRegistryPathToWin32RegistryPath (Ordinal: 58, Address: 0x61300)
RtlConvertWin32FilePathToNtFilePath (Ordinal: 59, Address: 0x60fc0)
RtlConvertWin32RegistryPathToNtRegistryPath (Ordinal: 60, Address: 0x60c30)
RtlCopyLUnicodeString (Ordinal: 61, Address: 0x5b890)
RtlCopyLUtf8String (Ordinal: 62, Address: 0x5e470)
RtlCopyLUtf8StringToLUnicodeString (Ordinal: 63, Address: 0x5e6c0)
RtlCreateDefaultMicrodomXmlWriter (Ordinal: 64, Address: 0x1e5c0)
RtlCreateDefaultXmlWriter (Ordinal: 65, Address: 0x201f0)
RtlCreateFilteringMicrodomWriter (Ordinal: 66, Address: 0x214d0)
RtlCreateMicrodom (Ordinal: 67, Address: 0x28550)
RtlCreateMicrodomUpdateContext (Ordinal: 68, Address: 0x2c1f0)
RtlCreateUpdatedMicrodomAsMicrodom (Ordinal: 69, Address: 0x2da70)
RtlCreateUpdatedMicrodomAsUtf8 (Ordinal: 70, Address: 0x2d910)
RtlCreateUtf16LEUCSStringBuilder (Ordinal: 71, Address: 0x62650)
RtlCreateUtf8UCSStringBuilder (Ordinal: 72, Address: 0x62330)
RtlCreateXMLDSIGSession (Ordinal: 73, Address: 0x327a0)
RtlDeallocateUnicodeString (Ordinal: 74, Address: 0x5b780)
RtlDecodeBase64LUnicodeStringToLBlob (Ordinal: 75, Address: 0x59670)
RtlDecodeBase64LUtf8StringToLBlob (Ordinal: 76, Address: 0x59460)
RtlDecodeUtf16LE (Ordinal: 77, Address: 0x119ad0)
RtlDecodeUtf8 (Ordinal: 78, Address: 0x119830)
RtlDestroyGrowingList (Ordinal: 79, Address: 0x40e70)
RtlDestroyMicrodomUpdateContext (Ordinal: 80, Address: 0x2c330)
RtlDetermineFilteredLUnicodeStringLength (Ordinal: 81, Address: 0x5e0d0)
RtlDetermineTranscodedLBlobSize (Ordinal: 82, Address: 0x57810)
RtlDoesLUnicodeStringMatchExpression (Ordinal: 83, Address: 0x5d910)
RtlDowncaseUCSCharacter (Ordinal: 84, Address: 0x119e20)
RtlDuplicateLBlob (Ordinal: 85, Address: 0x57690)
RtlDuplicateLUnicodeString (Ordinal: 86, Address: 0x5b9f0)
RtlDuplicateLUnicodeStringToLUtf8String (Ordinal: 87, Address: 0x5e8b0)
RtlDuplicateLUnicodeStringToUnicodeString (Ordinal: 88, Address: 0x5c970)
RtlDuplicateLUtf8String (Ordinal: 89, Address: 0x5e5d0)
RtlDuplicateLUtf8StringToLUnicodeString (Ordinal: 90, Address: 0x5e7d0)
RtlDuplicateNullTerminatedStringToLUnicodeString (Ordinal: 91, Address: 0x5bfc0)
RtlDuplicateUnicodeStringToLUnicodeString (Ordinal: 92, Address: 0x5bae0)
RtlEncodeUtf16LE (Ordinal: 93, Address: 0x11a220)
RtlEncodeUtf8 (Ordinal: 94, Address: 0x11a050)
RtlEqualLUnicodeStringPrefix (Ordinal: 95, Address: 0x5cb10)
RtlEqualLUnicodeStrings (Ordinal: 96, Address: 0x5cb60)
RtlEqualLUtf8StringPrefix (Ordinal: 97, Address: 0x5feb0)
RtlEqualLUtf8Strings (Ordinal: 98, Address: 0x5f2f0)
RtlExecuteXPathOverMicrodom (Ordinal: 99, Address: 0x42bd0)
RtlFilterLUnicodeString (Ordinal: 100, Address: 0x5e2e0)
RtlFinalizeSmartLBlobUcsWritingContext (Ordinal: 101, Address: 0xafab0)
RtlFinalizeSmartLBlobWritingContext (Ordinal: 102, Address: 0xafab0)
RtlFreeLBlob (Ordinal: 103, Address: 0x59f80)
RtlFreeLUnicodeString (Ordinal: 104, Address: 0x59f80)
RtlFreeLUtf8String (Ordinal: 105, Address: 0x59f80)
RtlGetEncodingSizeUcs2 (Ordinal: 106, Address: 0x11a610)
RtlGetEncodingSizeUtf16 (Ordinal: 107, Address: 0x11a5c0)
RtlGetEncodingSizeUtf8 (Ordinal: 108, Address: 0x117240)
RtlGetHashAlgorithmHashLength (Ordinal: 109, Address: 0x581f0)
RtlHashLBlob (Ordinal: 110, Address: 0x58310)
RtlHashLUnicodeString (Ordinal: 111, Address: 0x5e430)
RtlHashLUtf8String (Ordinal: 112, Address: 0x5e450)
RtlIndexIntoGrowingList (Ordinal: 113, Address: 0x40d70)
RtlInitLUnicodeStringFromNullTerminatedString (Ordinal: 114, Address: 0x5bf10)
RtlInitLUnicodeStringFromUnicodeString (Ordinal: 115, Address: 0x5bcc0)
RtlInitUnicodeStringFromLUnicodeString (Ordinal: 116, Address: 0x5bd60)
RtlInitializeGrowingList (Ordinal: 117, Address: 0xf5b90)
RtlInitializeSmartLBlobWritingContext (Ordinal: 118, Address: 0x59860)
RtlInitializeSmartLUnicodeStringWritingContext (Ordinal: 119, Address: 0x60010)
RtlInitializeSmartLUtf8StringWritingContext (Ordinal: 120, Address: 0x60150)
RtlIsLBlobValid (Ordinal: 121, Address: 0x110750)
RtlIsLUnicodeStringValid (Ordinal: 122, Address: 0x114f90)
RtlIsLUtf8StringValid (Ordinal: 123, Address: 0x116a60)
RtlLengthOfUcsCharacterEncodedAsUtf8 (Ordinal: 124, Address: 0x117240)
RtlMatchEncodedLBlobAgainstList (Ordinal: 125, Address: 0x5b530)
RtlMatchEncodedLBlobAgainstPointerList (Ordinal: 126, Address: 0x5b5e0)
RtlMatchLUnicodeStringAgainstLUtf8StringList (Ordinal: 127, Address: 0x5cdf0)
RtlMatchLUnicodeStringAgainstLUtf8StringPointerList (Ordinal: 128, Address: 0x5d1d0)
RtlMatchLUnicodeStringAgainstList (Ordinal: 129, Address: 0x5cc00)
RtlMatchLUnicodeStringAgainstPointerList (Ordinal: 130, Address: 0x5cfe0)
RtlMatchLUtf8StringAgainstLUnicodeStringList (Ordinal: 131, Address: 0x5f5a0)
RtlMatchLUtf8StringAgainstLUnicodeStringPointerList (Ordinal: 132, Address: 0x5f980)
RtlMatchLUtf8StringAgainstList (Ordinal: 133, Address: 0x5f3b0)
RtlMatchLUtf8StringAgainstPointerList (Ordinal: 134, Address: 0x5f790)
RtlMicrodomUpdateCreateAttributeNs (Ordinal: 135, Address: 0x2c7c0)
RtlMicrodomUpdateCreateElementNs (Ordinal: 136, Address: 0x2c3d0)
RtlMicrodomUpdateCreateTextual (Ordinal: 137, Address: 0x2c670)
RtlMicrodomUpdateGetCookieForExistingAttribute (Ordinal: 138, Address: 0x2ca40)
RtlMicrodomUpdateGetCookieForExistingNode (Ordinal: 139, Address: 0x2c9a0)
RtlMicrodomUpdateInsertChild (Ordinal: 140, Address: 0x2cd80)
RtlMicrodomUpdateInsertMicrodomNodeEx (Ordinal: 141, Address: 0x2d630)
RtlMicrodomUpdateRemoveChild (Ordinal: 142, Address: 0x2cf10)
RtlMicrodomUpdateRemoveElement (Ordinal: 143, Address: 0x2d020)
RtlMicrodomUpdateSetNodeName (Ordinal: 144, Address: 0x2cc30)
RtlMicrodomUpdateSetNodeTextContent (Ordinal: 145, Address: 0x2cae0)
RtlMurmurHashLBlob (Ordinal: 146, Address: 0x11a830)
RtlNsDestroy (Ordinal: 147, Address: 0x433f0)
RtlNsInitialize (Ordinal: 148, Address: 0x43360)
RtlPreInitializeSmartLBlobUcsWritingContext (Ordinal: 149, Address: 0x116c70)
RtlPreInitializeSmartLBlobWritingContext (Ordinal: 150, Address: 0x1100a0)
RtlReallocateLBlob (Ordinal: 151, Address: 0x57380)
RtlReallocateLUnicodeString (Ordinal: 152, Address: 0x5d5e0)
RtlReallocateLUtf8String (Ordinal: 153, Address: 0x5fb70)
RtlReallocateUnicodeString (Ordinal: 154, Address: 0x5d3c0)
RtlRegisterErrorOriginationCallback (Ordinal: 155, Address: 0x629b0)
RtlReportErrorOrigination (Ordinal: 156, Address: 0x629e0)
RtlReportErrorPropagation (Ordinal: 157, Address: 0x629c0)
RtlSmartMultiUcsEncoder_Utf16LE (Ordinal: 158, Address: 0x605a0)
RtlSmartMultiUcsEncoder_Utf8 (Ordinal: 159, Address: 0x60550)
RtlSmartUcsEncoder_Utf16LE (Ordinal: 160, Address: 0x60560)
RtlSmartUcsEncoder_Utf8 (Ordinal: 161, Address: 0x60510)
RtlSplitEncodedLBlob (Ordinal: 162, Address: 0x57c80)
RtlSplitLUnicodeString (Ordinal: 163, Address: 0x5c060)
RtlSplitLUtf8String (Ordinal: 164, Address: 0x5e9b0)
RtlSplitWin32RegistryPathIntoRootAndLeaves (Ordinal: 165, Address: 0x60d90)
RtlTranscodeLBlobs (Ordinal: 166, Address: 0x59fa0)
RtlUpcaseUCSCharacter (Ordinal: 167, Address: 0x119e70)
RtlWriteDataIntoSmartLBlobWritingContext (Ordinal: 168, Address: 0x59b30)
RtlWriteDecodedUcsDataIntoSmartLBlobUcsWritingContext (Ordinal: 169, Address: 0x60250)
RtlWriteMicrodomXml (Ordinal: 170, Address: 0x1e820)
RtlXmlDefaultCompareStrings (Ordinal: 171, Address: 0x440e0)
RtlXmlDestroyNextLogicalThing (Ordinal: 172, Address: 0x48010)
RtlXmlDetermineStreamEncoding (Ordinal: 173, Address: 0x47de0)
RtlXmlExtentToString (Ordinal: 174, Address: 0x4a510)
RtlXmlInitializeNextLogicalThing (Ordinal: 175, Address: 0x48020)
RtlXmlInitializeTokenization (Ordinal: 176, Address: 0x47ce0)
RtlXmlNextLogicalThing (Ordinal: 177, Address: 0x48790)
RtlXmlNextToken (Ordinal: 178, Address: 0x467d0)
SczAlloc (Ordinal: 179, Address: 0x1ae50)
SczAllocConcat2Sz (Ordinal: 180, Address: 0x1b290)
SczAllocConcatSz (Ordinal: 181, Address: 0x1b110)
SczAllocFormatted (Ordinal: 182, Address: 0x1b470)
SczAllocFromAnsiSz (Ordinal: 183, Address: 0x1b950)
SczAllocFromSz (Ordinal: 184, Address: 0x1b760)
SczAllocPrefixSz (Ordinal: 185, Address: 0x1af50)
SczEnsureBackslashTerminated (Ordinal: 186, Address: 0x1bb40)
SczFree (Ordinal: 187, Address: 0x1bb10)
SfpCreateOfflineRepairObject (Ordinal: 188, Address: 0x6c4a0)
SfpUnload (Ordinal: 189, Address: 0x6c720)
StringsAreEqualCaseInsensitive (Ordinal: 190, Address: 0xc8980)
SzEnsureBackslashTerminated (Ordinal: 191, Address: 0x1bbe0)
UninstallWindows (Ordinal: 192, Address: 0x75dd0)

Imported DLLs & Functions

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x18016f420)
AcquireSRWLockShared (Address: 0x18016f418)
CloseHandle (Address: 0x18016f410)
CloseThreadpoolTimer (Address: 0x18016f408)
CompareFileTime (Address: 0x18016f400)
CompareStringOrdinal (Address: 0x18016f3f8)
CopyFileExW (Address: 0x18016f3f0)
CopyFileW (Address: 0x18016f3e8)
CreateDirectoryW (Address: 0x18016f3e0)
CreateEventW (Address: 0x18016f3d8)
CreateFileW (Address: 0x18016f3d0)
CreateHardLinkW (Address: 0x18016f3c8)
CreateMutexExW (Address: 0x18016f3c0)
CreateSemaphoreExW (Address: 0x18016f3b8)
CreateThreadpoolTimer (Address: 0x18016f3b0)
DebugBreak (Address: 0x18016f3a8)
DelayLoadFailureHook (Address: 0x18016f3a0)
DeleteCriticalSection (Address: 0x18016f398)
DeleteFileW (Address: 0x18016f390)
DeviceIoControl (Address: 0x18016f388)
EncodePointer (Address: 0x18016f380)
EnterCriticalSection (Address: 0x18016f378)
EnumResourceLanguagesExW (Address: 0x18016f370)
ExitProcess (Address: 0x18016f368)
ExpandEnvironmentStringsW (Address: 0x18016f360)
FindClose (Address: 0x18016f358)
FindFirstFileExW (Address: 0x18016f350)
FindFirstFileW (Address: 0x18016f348)
FindNextFileW (Address: 0x18016f340)
FindResourceExW (Address: 0x18016f338)
FlsAlloc (Address: 0x18016f330)
FlsFree (Address: 0x18016f328)
FlsGetValue (Address: 0x18016f320)
FlsSetValue (Address: 0x18016f318)
FlushFileBuffers (Address: 0x18016f310)
FormatMessageW (Address: 0x18016f308)
FreeEnvironmentStringsW (Address: 0x18016f300)
FreeLibrary (Address: 0x18016f2f8)
GetACP (Address: 0x18016f2f0)
GetCommandLineA (Address: 0x18016f2e8)
GetCommandLineW (Address: 0x18016f2e0)
GetCompressedFileSizeW (Address: 0x18016f2d8)
GetConsoleMode (Address: 0x18016f2d0)
GetConsoleOutputCP (Address: 0x18016f2c8)
GetCPInfo (Address: 0x18016f2c0)
GetCurrentProcess (Address: 0x18016f2b8)
GetCurrentProcessId (Address: 0x18016f2b0)
GetCurrentThreadId (Address: 0x18016f2a8)
GetDiskFreeSpaceW (Address: 0x18016f2a0)
GetEnvironmentStringsW (Address: 0x18016f298)
GetEnvironmentVariableW (Address: 0x18016f290)
GetErrorMode (Address: 0x18016f288)
GetFileAttributesExW (Address: 0x18016f280)
GetFileAttributesW (Address: 0x18016f278)
GetFileSizeEx (Address: 0x18016f270)
GetFileType (Address: 0x18016f268)
GetLastError (Address: 0x18016f260)
GetLocalTime (Address: 0x18016f258)
GetModuleFileNameA (Address: 0x18016f250)
GetModuleFileNameW (Address: 0x18016f248)
GetModuleHandleExW (Address: 0x18016f240)
GetModuleHandleW (Address: 0x18016f238)
GetOEMCP (Address: 0x18016f230)
GetProcAddress (Address: 0x18016f228)
GetProcessHeap (Address: 0x18016f220)
GetStartupInfoW (Address: 0x18016f218)
GetStdHandle (Address: 0x18016f210)
GetStringTypeW (Address: 0x18016f208)
GetSystemTime (Address: 0x18016f200)
GetSystemTimeAsFileTime (Address: 0x18016f1f8)
GetSystemWindowsDirectoryW (Address: 0x18016f1f0)
GetTempPathW (Address: 0x18016f1e8)
GetWindowsDirectoryW (Address: 0x18016f1e0)
HeapAlloc (Address: 0x18016f1d8)
HeapFree (Address: 0x18016f1d0)
HeapReAlloc (Address: 0x18016f1c8)
HeapSize (Address: 0x18016f1c0)
InitializeCriticalSectionAndSpinCount (Address: 0x18016f1b8)
InitializeCriticalSectionEx (Address: 0x18016f1b0)
InitializeSListHead (Address: 0x18016f1a8)
InterlockedFlushSList (Address: 0x18016f1a0)
IsDebuggerPresent (Address: 0x18016f198)
IsValidCodePage (Address: 0x18016f190)
LCMapStringW (Address: 0x18016f188)
LeaveCriticalSection (Address: 0x18016f180)
LoadLibraryExA (Address: 0x18016f178)
LoadLibraryExW (Address: 0x18016f170)
LoadLibraryW (Address: 0x18016f168)
LoadResource (Address: 0x18016f160)
LocalAlloc (Address: 0x18016f158)
LocalFree (Address: 0x18016f150)
LockResource (Address: 0x18016f148)
lstrcmpiW (Address: 0x18016f140)
lstrcmpW (Address: 0x18016f138)
MoveFileExW (Address: 0x18016f130)
MultiByteToWideChar (Address: 0x18016f128)
OpenSemaphoreW (Address: 0x18016f120)
OutputDebugStringA (Address: 0x18016f118)
OutputDebugStringW (Address: 0x18016f110)
PrivCopyFileExW (Address: 0x18016f108)
QueryPerformanceCounter (Address: 0x18016f100)
RaiseException (Address: 0x18016f0f8)
ReadConsoleW (Address: 0x18016f0f0)
ReadFile (Address: 0x18016f0e8)
ReleaseMutex (Address: 0x18016f0e0)
ReleaseSemaphore (Address: 0x18016f0d8)
ReleaseSRWLockExclusive (Address: 0x18016f0d0)
ReleaseSRWLockShared (Address: 0x18016f0c8)
RemoveDirectoryW (Address: 0x18016f0c0)
ResetEvent (Address: 0x18016f0b8)
RtlLookupFunctionEntry (Address: 0x18016f0b0)
RtlPcToFileHeader (Address: 0x18016f0a8)
RtlUnwindEx (Address: 0x18016f0a0)
SetCurrentDirectoryW (Address: 0x18016f098)
SetEndOfFile (Address: 0x18016f090)
SetEnvironmentVariableW (Address: 0x18016f088)
SetErrorMode (Address: 0x18016f080)
SetEvent (Address: 0x18016f078)
SetFilePointer (Address: 0x18016f070)
SetFilePointerEx (Address: 0x18016f068)
SetLastError (Address: 0x18016f060)
SetStdHandle (Address: 0x18016f058)
SetThreadpoolTimer (Address: 0x18016f050)
SetUnhandledExceptionFilter (Address: 0x18016f048)
SizeofResource (Address: 0x18016f040)
Sleep (Address: 0x18016f038)
TerminateProcess (Address: 0x18016f030)
WaitForSingleObject (Address: 0x18016f028)
WaitForSingleObjectEx (Address: 0x18016f020)
WaitForThreadpoolTimerCallbacks (Address: 0x18016f018)
WideCharToMultiByte (Address: 0x18016f010)
WriteConsoleW (Address: 0x18016f008)
WriteFile (Address: 0x18016f000)

ntdll.dll

DbgPrint (Address: 0x18016f458)
DbgPrintEx (Address: 0x18016f460)
LdrGetDllHandleEx (Address: 0x18016f468)
LdrGetProcedureAddress (Address: 0x18016f470)
LdrUnloadDll (Address: 0x18016f478)
NtAdjustPrivilegesToken (Address: 0x18016f480)
NtClose (Address: 0x18016f488)
NtCreateFile (Address: 0x18016f610)
NtDelayExecution (Address: 0x18016f490)
NtDuplicateToken (Address: 0x18016f498)
NtFlushKey (Address: 0x18016f4a0)
NtFsControlFile (Address: 0x18016f4a8)
NtLoadKey2 (Address: 0x18016f4b0)
NtOpenFile (Address: 0x18016f618)
NtOpenKey (Address: 0x18016f4b8)
NtOpenKeyEx (Address: 0x18016f4c0)
NtOpenProcessToken (Address: 0x18016f4c8)
NtOpenThreadToken (Address: 0x18016f4d0)
NtQueryDirectoryFile (Address: 0x18016f4d8)
NtQueryInformationFile (Address: 0x18016f4e0)
NtQueryObject (Address: 0x18016f4e8)
NtQueryPerformanceCounter (Address: 0x18016f4f0)
NtQueryValueKey (Address: 0x18016f4f8)
NtReadFile (Address: 0x18016f620)
NtSetInformationThread (Address: 0x18016f500)
NtUnloadKey2 (Address: 0x18016f508)
NtWriteFile (Address: 0x18016f510)
NtYieldExecution (Address: 0x18016f518)
RtlAdjustPrivilege (Address: 0x18016f520)
RtlAllocateHeap (Address: 0x18016f528)
RtlCopyMappedMemory (Address: 0x18016f530)
RtlCopyUnicodeString (Address: 0x18016f538)
RtlCreateServiceSid (Address: 0x18016f540)
RtlCreateUnicodeString (Address: 0x18016f548)
RtlCreateUnicodeStringFromAsciiz (Address: 0x18016f550)
RtlDeleteCriticalSection (Address: 0x18016f558)
RtlDosPathNameToNtPathName_U (Address: 0x18016f560)
RtlDowncaseUnicodeChar (Address: 0x18016f568)
RtlEnterCriticalSection (Address: 0x18016f570)
RtlEqualSid (Address: 0x18016f578)
RtlFormatCurrentUserKeyPath (Address: 0x18016f580)
RtlFreeHeap (Address: 0x18016f588)
RtlFreeUnicodeString (Address: 0x18016f590)
RtlHashUnicodeString (Address: 0x18016f598)
RtlInitializeCriticalSection (Address: 0x18016f5a8)
RtlInitUnicodeString (Address: 0x18016f5a0)
RtlLeaveCriticalSection (Address: 0x18016f5b0)
RtlMapGenericMask (Address: 0x18016f5b8)
RtlNtStatusToDosError (Address: 0x18016f5c0)
RtlNtStatusToDosErrorNoTeb (Address: 0x18016f5c8)
RtlQueryEnvironmentVariable_U (Address: 0x18016f5d0)
RtlRaiseStatus (Address: 0x18016f5d8)
RtlReAllocateHeap (Address: 0x18016f5e0)
RtlTimeToTimeFields (Address: 0x18016f5e8)
RtlUpcaseUnicodeChar (Address: 0x18016f5f0)
ZwClose (Address: 0x18016f5f8)
ZwCreateSection (Address: 0x18016f628)
ZwMapViewOfSection (Address: 0x18016f630)
ZwQueryInformationFile (Address: 0x18016f600)
ZwUnmapViewOfSection (Address: 0x18016f608)