ServicingCommon.dll

Description: Servicing Base DLL

Version: 10.0.22621.5040

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8962ce812bc21c6d960cc198a61e6a43

File Size: 973.5 KB

Uploaded At: Dec. 3, 2025, 2:37 a.m.

Views: 7

Exported Functions

CBSWdsLog (Ordinal: 1, Address: 0x184a0)
CreateKeyformFromAttributesIntoBuffer (Ordinal: 2, Address: 0x67f50)
RecursiveCopy (Ordinal: 3, Address: 0x195b0)
SetCustomLogging (Ordinal: 4, Address: 0x16bd0)
BeginFileMapEnumerationInternal (Ordinal: 5, Address: 0x70560)
CbsCreateOfflineSession (Ordinal: 6, Address: 0x17b0)
CbsCreateOfflineSessionFromStackInImage (Ordinal: 7, Address: 0x8990)
CbsFindServicingStackDirectory (Ordinal: 8, Address: 0x12e0)
CbsGetSsBinaryPathFromTargetImage (Ordinal: 9, Address: 0x89d0)
CbsLoadSssFromTargetImage (Ordinal: 10, Address: 0x89b0)
CbsOfflineFinalize (Ordinal: 11, Address: 0x17d0)
CbsOfflineFinalizeNoShutdownImageStack (Ordinal: 12, Address: 0x17f0)
CbsOfflineSetLogFile (Ordinal: 13, Address: 0x1d60)
CbsShutdownImageStack (Ordinal: 14, Address: 0x8970)
CloseFileMapEnumerationInternal (Ordinal: 15, Address: 0x708f0)
CompareObjectSDToSddl (Ordinal: 16, Address: 0x71140)
ConvertHResultToNtStatus (Ordinal: 17, Address: 0x64e10)
ConvertNtStatusToHResult (Ordinal: 18, Address: 0x649d0)
DecompressManifest (Ordinal: 19, Address: 0x693b0)
EstimateReconstructWindowsDiskNeeds (Ordinal: 20, Address: 0xc4c0)
EstimateReconstructWindowsRAMNeeds (Ordinal: 21, Address: 0xc750)
FileVersionFromString (Ordinal: 22, Address: 0x19970)
GetCWcpDll (Ordinal: 23, Address: 0x67a60)
GetIdentityAuthority (Ordinal: 24, Address: 0x73ac0)
GetLoadedHiveKeyName (Ordinal: 25, Address: 0x654a0)
GetNextFileMapContentInternal (Ordinal: 26, Address: 0x70930)
GetTemporaryPath (Ordinal: 27, Address: 0x659d0)
GetUpdateReserveManagerLoader (Ordinal: 28, Address: 0x6f420)
IsKeyProtected (Ordinal: 29, Address: 0x71a80)
IsLuaCdfFile (Ordinal: 30, Address: 0x70950)
LoadUpdateReserveManager (Ordinal: 31, Address: 0x6f540)
ReconstructWindowsEx (Ordinal: 32, Address: 0xc790)
ReconstructWindowsEx2 (Ordinal: 33, Address: 0xc7f0)
RemoveFileProtection (Ordinal: 34, Address: 0x71f90)
RemoveRegKeyProtection (Ordinal: 35, Address: 0x72990)
RtlAllocateLBlob (Ordinal: 36, Address: 0x5ada0)
RtlAllocateLUnicodeString (Ordinal: 37, Address: 0x5c5d0)
RtlAllocateLUtf8String (Ordinal: 38, Address: 0x60d10)
RtlAllocateUnicodeString (Ordinal: 39, Address: 0x5c4b0)
RtlAppendLUnicodeStringToLUnicodeString (Ordinal: 40, Address: 0x5d420)
RtlAppendLUtf8StringToLUtf8String (Ordinal: 41, Address: 0x5fdc0)
RtlAppendUcsCharacterToLUnicodeString (Ordinal: 42, Address: 0x5e690)
RtlAppendUcsCharacterToLUtf8String (Ordinal: 43, Address: 0x5ff50)
RtlAppendUcsCharactersToLUnicodeString (Ordinal: 44, Address: 0x5e4d0)
RtlBase64EncodeLBlobToLUnicodeString (Ordinal: 45, Address: 0x59920)
RtlBase64EncodeLBlobToLUtf8String (Ordinal: 46, Address: 0x59b40)
RtlCalculateUtf16StringLengthFromLUtf8String (Ordinal: 47, Address: 0x60b20)
RtlCommitSmartLBlobUcsWritingContext (Ordinal: 48, Address: 0x610b0)
RtlCommitSmartLBlobWritingContext (Ordinal: 49, Address: 0x5ad60)
RtlCompareEncodedLBlobs (Ordinal: 50, Address: 0x5b620)
RtlCompareLUnicodeStringToLUtf8String (Ordinal: 51, Address: 0x60d60)
RtlCompareLUnicodeStrings (Ordinal: 52, Address: 0x5cad0)
RtlCompareLUtf8StringToLUnicodeString (Ordinal: 53, Address: 0x5f8a0)
RtlCompareLUtf8Strings (Ordinal: 54, Address: 0x60d20)
RtlConcatenateLUnicodeStrings (Ordinal: 55, Address: 0x5d1b0)
RtlConcatenateLUtf8Strings (Ordinal: 56, Address: 0x5fb50)
RtlConvertNtFilePathToWin32FilePath (Ordinal: 57, Address: 0x622b0)
RtlConvertNtRegistryPathToWin32RegistryPath (Ordinal: 58, Address: 0x62200)
RtlConvertWin32FilePathToNtFilePath (Ordinal: 59, Address: 0x61f10)
RtlConvertWin32RegistryPathToNtRegistryPath (Ordinal: 60, Address: 0x61b80)
RtlCopyLUnicodeString (Ordinal: 61, Address: 0x5c6f0)
RtlCopyLUtf8String (Ordinal: 62, Address: 0x5f390)
RtlCopyLUtf8StringToLUnicodeString (Ordinal: 63, Address: 0x5f5b0)
RtlCreateDefaultMicrodomXmlWriter (Ordinal: 64, Address: 0x1dc10)
RtlCreateDefaultXmlWriter (Ordinal: 65, Address: 0x1f770)
RtlCreateFilteringMicrodomWriter (Ordinal: 66, Address: 0x20760)
RtlCreateMicrodom (Ordinal: 67, Address: 0x27520)
RtlCreateMicrodomUpdateContext (Ordinal: 68, Address: 0x2b5b0)
RtlCreateUpdatedMicrodomAsMicrodom (Ordinal: 69, Address: 0x2cdd0)
RtlCreateUpdatedMicrodomAsUtf8 (Ordinal: 70, Address: 0x2cc90)
RtlCreateUtf16LEUCSStringBuilder (Ordinal: 71, Address: 0x63490)
RtlCreateUtf8UCSStringBuilder (Ordinal: 72, Address: 0x63190)
RtlCreateXMLDSIGSession (Ordinal: 73, Address: 0x317f0)
RtlDeallocateUnicodeString (Ordinal: 74, Address: 0x5c5a0)
RtlDecodeBase64LUnicodeStringToLBlob (Ordinal: 75, Address: 0x5a520)
RtlDecodeBase64LUtf8StringToLBlob (Ordinal: 76, Address: 0x5a2e0)
RtlDecodeUtf16LE (Ordinal: 77, Address: 0x63aa0)
RtlDecodeUtf8 (Ordinal: 78, Address: 0x637d0)
RtlDestroyGrowingList (Ordinal: 79, Address: 0x40da0)
RtlDestroyMicrodomUpdateContext (Ordinal: 80, Address: 0x2b6f0)
RtlDetermineFilteredLUnicodeStringLength (Ordinal: 81, Address: 0x5ef10)
RtlDetermineTranscodedLBlobSize (Ordinal: 82, Address: 0x58590)
RtlDoesLUnicodeStringMatchExpression (Ordinal: 83, Address: 0x5e6e0)
RtlDowncaseUCSCharacter (Ordinal: 84, Address: 0x63d30)
RtlDuplicateLBlob (Ordinal: 85, Address: 0x58410)
RtlDuplicateLUnicodeString (Ordinal: 86, Address: 0x5c820)
RtlDuplicateLUnicodeStringToLUtf8String (Ordinal: 87, Address: 0x5f7b0)
RtlDuplicateLUnicodeStringToUnicodeString (Ordinal: 88, Address: 0x5d760)
RtlDuplicateLUtf8String (Ordinal: 89, Address: 0x5f4c0)
RtlDuplicateLUtf8StringToLUnicodeString (Ordinal: 90, Address: 0x5f6c0)
RtlDuplicateNullTerminatedStringToLUnicodeString (Ordinal: 91, Address: 0x5cde0)
RtlDuplicateUnicodeStringToLUnicodeString (Ordinal: 92, Address: 0x5c910)
RtlEncodeUtf16LE (Ordinal: 93, Address: 0x64100)
RtlEncodeUtf8 (Ordinal: 94, Address: 0x63f30)
RtlEqualLUnicodeStringPrefix (Ordinal: 95, Address: 0x5d8f0)
RtlEqualLUnicodeStrings (Ordinal: 96, Address: 0x5d930)
RtlEqualLUtf8StringPrefix (Ordinal: 97, Address: 0x60da0)
RtlEqualLUtf8Strings (Ordinal: 98, Address: 0x601a0)
RtlExecuteXPathOverMicrodom (Ordinal: 99, Address: 0x42d40)
RtlFilterLUnicodeString (Ordinal: 100, Address: 0x5f130)
RtlFinalizeSmartLBlobUcsWritingContext (Ordinal: 101, Address: 0x610c0)
RtlFinalizeSmartLBlobWritingContext (Ordinal: 102, Address: 0x5a740)
RtlFreeLBlob (Ordinal: 103, Address: 0x5ae40)
RtlFreeLUnicodeString (Ordinal: 104, Address: 0x5c6c0)
RtlFreeLUtf8String (Ordinal: 105, Address: 0x5f360)
RtlGetEncodingSizeUcs2 (Ordinal: 106, Address: 0x64490)
RtlGetEncodingSizeUtf16 (Ordinal: 107, Address: 0x64440)
RtlGetEncodingSizeUtf8 (Ordinal: 108, Address: 0x614e0)
RtlGetHashAlgorithmHashLength (Ordinal: 109, Address: 0x58fa0)
RtlHashLBlob (Ordinal: 110, Address: 0x590c0)
RtlHashLUnicodeString (Ordinal: 111, Address: 0x5f320)
RtlHashLUtf8String (Ordinal: 112, Address: 0x5f340)
RtlIndexIntoGrowingList (Ordinal: 113, Address: 0x40ca0)
RtlInitLUnicodeStringFromNullTerminatedString (Ordinal: 114, Address: 0x5cd40)
RtlInitLUnicodeStringFromUnicodeString (Ordinal: 115, Address: 0x5cb10)
RtlInitUnicodeStringFromLUnicodeString (Ordinal: 116, Address: 0x5cba0)
RtlInitializeGrowingList (Ordinal: 117, Address: 0x40af0)
RtlInitializeSmartLBlobWritingContext (Ordinal: 118, Address: 0x5a750)
RtlInitializeSmartLUnicodeStringWritingContext (Ordinal: 119, Address: 0x60f20)
RtlInitializeSmartLUtf8StringWritingContext (Ordinal: 120, Address: 0x61050)
RtlIsLBlobValid (Ordinal: 121, Address: 0x5ad70)
RtlIsLUnicodeStringValid (Ordinal: 122, Address: 0x5f2e0)
RtlIsLUtf8StringValid (Ordinal: 123, Address: 0x60ce0)
RtlLengthOfUcsCharacterEncodedAsUtf8 (Ordinal: 124, Address: 0x614e0)
RtlMatchEncodedLBlobAgainstList (Ordinal: 125, Address: 0x5c350)
RtlMatchEncodedLBlobAgainstPointerList (Ordinal: 126, Address: 0x5c400)
RtlMatchLUnicodeStringAgainstLUtf8StringList (Ordinal: 127, Address: 0x5dbc0)
RtlMatchLUnicodeStringAgainstLUtf8StringPointerList (Ordinal: 128, Address: 0x5dfb0)
RtlMatchLUnicodeStringAgainstList (Ordinal: 129, Address: 0x5d9c0)
RtlMatchLUnicodeStringAgainstPointerList (Ordinal: 130, Address: 0x5ddc0)
RtlMatchLUtf8StringAgainstLUnicodeStringList (Ordinal: 131, Address: 0x60450)
RtlMatchLUtf8StringAgainstLUnicodeStringPointerList (Ordinal: 132, Address: 0x60840)
RtlMatchLUtf8StringAgainstList (Ordinal: 133, Address: 0x60250)
RtlMatchLUtf8StringAgainstPointerList (Ordinal: 134, Address: 0x60650)
RtlMicrodomUpdateCreateAttributeNs (Ordinal: 135, Address: 0x2bb50)
RtlMicrodomUpdateCreateElementNs (Ordinal: 136, Address: 0x2b7a0)
RtlMicrodomUpdateCreateTextual (Ordinal: 137, Address: 0x2ba20)
RtlMicrodomUpdateGetCookieForExistingAttribute (Ordinal: 138, Address: 0x2bda0)
RtlMicrodomUpdateGetCookieForExistingNode (Ordinal: 139, Address: 0x2bd00)
RtlMicrodomUpdateInsertChild (Ordinal: 140, Address: 0x2c0b0)
RtlMicrodomUpdateInsertMicrodomNodeEx (Ordinal: 141, Address: 0x2c9a0)
RtlMicrodomUpdateRemoveChild (Ordinal: 142, Address: 0x2c220)
RtlMicrodomUpdateRemoveElement (Ordinal: 143, Address: 0x2c330)
RtlMicrodomUpdateSetNodeName (Ordinal: 144, Address: 0x2bf80)
RtlMicrodomUpdateSetNodeTextContent (Ordinal: 145, Address: 0x2be40)
RtlMurmurHashLBlob (Ordinal: 146, Address: 0x64730)
RtlNsDestroy (Ordinal: 147, Address: 0x433d0)
RtlNsInitialize (Ordinal: 148, Address: 0x43310)
RtlPreInitializeSmartLBlobUcsWritingContext (Ordinal: 149, Address: 0x60ef0)
RtlPreInitializeSmartLBlobWritingContext (Ordinal: 150, Address: 0x5a720)
RtlReallocateLBlob (Ordinal: 151, Address: 0x58130)
RtlReallocateLUnicodeString (Ordinal: 152, Address: 0x5e3b0)
RtlReallocateLUtf8String (Ordinal: 153, Address: 0x60a30)
RtlReallocateUnicodeString (Ordinal: 154, Address: 0x5e1a0)
RtlRegisterErrorOriginationCallback (Ordinal: 155, Address: 0x64750)
RtlReportErrorOrigination (Ordinal: 156, Address: 0x64790)
RtlReportErrorPropagation (Ordinal: 157, Address: 0x64770)
RtlSmartMultiUcsEncoder_Utf16LE (Ordinal: 158, Address: 0x614d0)
RtlSmartMultiUcsEncoder_Utf8 (Ordinal: 159, Address: 0x61470)
RtlSmartUcsEncoder_Utf16LE (Ordinal: 160, Address: 0x61480)
RtlSmartUcsEncoder_Utf8 (Ordinal: 161, Address: 0x61420)
RtlSplitEncodedLBlob (Ordinal: 162, Address: 0x589c0)
RtlSplitLUnicodeString (Ordinal: 163, Address: 0x5ce80)
RtlSplitLUtf8String (Ordinal: 164, Address: 0x5f8e0)
RtlSplitWin32RegistryPathIntoRootAndLeaves (Ordinal: 165, Address: 0x61cd0)
RtlTranscodeLBlobs (Ordinal: 166, Address: 0x5ae70)
RtlUpcaseUCSCharacter (Ordinal: 167, Address: 0x63d80)
RtlWriteDataIntoSmartLBlobWritingContext (Ordinal: 168, Address: 0x5aa10)
RtlWriteDecodedUcsDataIntoSmartLBlobUcsWritingContext (Ordinal: 169, Address: 0x61170)
RtlWriteMicrodomXml (Ordinal: 170, Address: 0x1de40)
RtlXmlDefaultCompareStrings (Ordinal: 171, Address: 0x43a10)
RtlXmlDestroyNextLogicalThing (Ordinal: 172, Address: 0x47e60)
RtlXmlDetermineStreamEncoding (Ordinal: 173, Address: 0x47bc0)
RtlXmlExtentToString (Ordinal: 174, Address: 0x4a3b0)
RtlXmlInitializeNextLogicalThing (Ordinal: 175, Address: 0x47e80)
RtlXmlInitializeTokenization (Ordinal: 176, Address: 0x47ab0)
RtlXmlNextLogicalThing (Ordinal: 177, Address: 0x485c0)
RtlXmlNextToken (Ordinal: 178, Address: 0x46440)
SczAlloc (Ordinal: 179, Address: 0x1a490)
SczAllocConcat2Sz (Ordinal: 180, Address: 0x1a860)
SczAllocConcatSz (Ordinal: 181, Address: 0x1a700)
SczAllocFormatted (Ordinal: 182, Address: 0x1aa10)
SczAllocFromAnsiSz (Ordinal: 183, Address: 0x1ae60)
SczAllocFromSz (Ordinal: 184, Address: 0x1ac90)
SczAllocPrefixSz (Ordinal: 185, Address: 0x1a580)
SczEnsureBackslashTerminated (Ordinal: 186, Address: 0x1b030)
SczFree (Ordinal: 187, Address: 0x1b010)
SfpCreateOfflineRepairObject (Ordinal: 188, Address: 0x6ede0)
SfpUnload (Ordinal: 189, Address: 0x6f0b0)
StringsAreEqualCaseInsensitive (Ordinal: 190, Address: 0x1b130)
SzEnsureBackslashTerminated (Ordinal: 191, Address: 0x1b0b0)
UninstallWindows (Ordinal: 192, Address: 0x78ba0)

Imported DLLs & Functions

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1800b72c8)
AcquireSRWLockShared (Address: 0x1800b72d8)
CloseHandle (Address: 0x1800b72f0)
CloseThreadpoolTimer (Address: 0x1800b7318)
CompareFileTime (Address: 0x1800b73f8)
CompareStringOrdinal (Address: 0x1800b7470)
CopyFileExW (Address: 0x1800b73c0)
CopyFileW (Address: 0x1800b7360)
CreateDirectoryW (Address: 0x1800b7358)
CreateEventW (Address: 0x1800b75e0)
CreateFileW (Address: 0x1800b73c8)
CreateHardLinkW (Address: 0x1800b73e8)
CreateMutexExW (Address: 0x1800b7390)
CreateSemaphoreExW (Address: 0x1800b7398)
CreateThreadpoolTimer (Address: 0x1800b7350)
DebugBreak (Address: 0x1800b72a8)
DelayLoadFailureHook (Address: 0x1800b7638)
DeleteCriticalSection (Address: 0x1800b7338)
DeleteFileW (Address: 0x1800b7378)
DeviceIoControl (Address: 0x1800b7440)
EncodePointer (Address: 0x1800b7618)
EnterCriticalSection (Address: 0x1800b7328)
EnumResourceLanguagesExW (Address: 0x1800b7660)
ExitProcess (Address: 0x1800b7518)
ExpandEnvironmentStringsW (Address: 0x1800b7238)
FindClose (Address: 0x1800b73f0)
FindFirstFileExW (Address: 0x1800b73d8)
FindFirstFileW (Address: 0x1800b7400)
FindNextFileW (Address: 0x1800b73e0)
FindResourceExW (Address: 0x1800b7650)
FlsAlloc (Address: 0x1800b7548)
FlsFree (Address: 0x1800b7560)
FlsGetValue (Address: 0x1800b7550)
FlsSetValue (Address: 0x1800b7558)
FlushFileBuffers (Address: 0x1800b7468)
FormatMessageW (Address: 0x1800b7270)
FreeEnvironmentStringsW (Address: 0x1800b7480)
FreeLibrary (Address: 0x1800b7268)
GetACP (Address: 0x1800b7530)
GetCommandLineA (Address: 0x1800b7630)
GetCommandLineW (Address: 0x1800b7628)
GetCompressedFileSizeW (Address: 0x1800b73b0)
GetConsoleMode (Address: 0x1800b75a8)
GetConsoleOutputCP (Address: 0x1800b75a0)
GetCPInfo (Address: 0x1800b7540)
GetCurrentProcess (Address: 0x1800b7490)
GetCurrentProcessId (Address: 0x1800b7388)
GetCurrentThreadId (Address: 0x1800b7278)
GetDiskFreeSpaceW (Address: 0x1800b73a8)
GetEnvironmentStringsW (Address: 0x1800b7620)
GetEnvironmentVariableW (Address: 0x1800b7410)
GetErrorMode (Address: 0x1800b7368)
GetFileAttributesExW (Address: 0x1800b7458)
GetFileAttributesW (Address: 0x1800b7248)
GetFileSizeEx (Address: 0x1800b7438)
GetFileType (Address: 0x1800b7580)
GetLastError (Address: 0x1800b7240)
GetLocalTime (Address: 0x1800b74d8)
GetModuleFileNameA (Address: 0x1800b72a0)
GetModuleFileNameW (Address: 0x1800b7488)
GetModuleHandleExW (Address: 0x1800b7298)
GetModuleHandleW (Address: 0x1800b72b0)
GetOEMCP (Address: 0x1800b7538)
GetProcAddress (Address: 0x1800b7258)
GetProcessHeap (Address: 0x1800b7288)
GetStartupInfoW (Address: 0x1800b7588)
GetStdHandle (Address: 0x1800b7578)
GetStringTypeW (Address: 0x1800b7520)
GetSystemTime (Address: 0x1800b7420)
GetSystemTimeAsFileTime (Address: 0x1800b73d0)
GetSystemWindowsDirectoryW (Address: 0x1800b7460)
GetTempPathW (Address: 0x1800b74b0)
GetWindowsDirectoryW (Address: 0x1800b74b8)
HeapAlloc (Address: 0x1800b7280)
HeapFree (Address: 0x1800b7290)
HeapReAlloc (Address: 0x1800b75d8)
HeapSize (Address: 0x1800b75d0)
InitializeCriticalSectionAndSpinCount (Address: 0x1800b7568)
InitializeCriticalSectionEx (Address: 0x1800b7330)
InitializeSListHead (Address: 0x1800b75f0)
InterlockedFlushSList (Address: 0x1800b7600)
IsDebuggerPresent (Address: 0x1800b72b8)
IsProcessorFeaturePresent (Address: 0x1800b7510)
IsValidCodePage (Address: 0x1800b7528)
LCMapStringW (Address: 0x1800b7570)
LeaveCriticalSection (Address: 0x1800b73a0)
LoadLibraryExA (Address: 0x1800b7640)
LoadLibraryExW (Address: 0x1800b7250)
LoadLibraryW (Address: 0x1800b7418)
LoadResource (Address: 0x1800b7648)
LocalAlloc (Address: 0x1800b74a8)
LocalFree (Address: 0x1800b74a0)
LockResource (Address: 0x1800b7658)
lstrcmpiW (Address: 0x1800b74c0)
lstrcmpW (Address: 0x1800b74d0)
MoveFileExW (Address: 0x1800b73b8)
MultiByteToWideChar (Address: 0x1800b7478)
OpenSemaphoreW (Address: 0x1800b7348)
OutputDebugStringA (Address: 0x1800b7408)
OutputDebugStringW (Address: 0x1800b72c0)
PrivCopyFileExW (Address: 0x1800b7428)
QueryPerformanceCounter (Address: 0x1800b75e8)
RaiseException (Address: 0x1800b7610)
ReadConsoleW (Address: 0x1800b75b8)
ReadFile (Address: 0x1800b7430)
ReleaseMutex (Address: 0x1800b7300)
ReleaseSemaphore (Address: 0x1800b72f8)
ReleaseSRWLockExclusive (Address: 0x1800b72d0)
ReleaseSRWLockShared (Address: 0x1800b72e0)
RemoveDirectoryW (Address: 0x1800b7380)
RtlCaptureContext (Address: 0x1800b74e8)
RtlLookupFunctionEntry (Address: 0x1800b74f0)
RtlPcToFileHeader (Address: 0x1800b7608)
RtlUnwindEx (Address: 0x1800b75f8)
RtlVirtualUnwind (Address: 0x1800b74f8)
SetCurrentDirectoryW (Address: 0x1800b74c8)
SetEndOfFile (Address: 0x1800b75b0)
SetEnvironmentVariableW (Address: 0x1800b7260)
SetErrorMode (Address: 0x1800b7370)
SetFilePointer (Address: 0x1800b7448)
SetFilePointerEx (Address: 0x1800b75c0)
SetLastError (Address: 0x1800b72e8)
SetStdHandle (Address: 0x1800b7590)
SetThreadpoolTimer (Address: 0x1800b7308)
SetUnhandledExceptionFilter (Address: 0x1800b7508)
SizeofResource (Address: 0x1800b7668)
Sleep (Address: 0x1800b7450)
TerminateProcess (Address: 0x1800b7498)
UnhandledExceptionFilter (Address: 0x1800b7500)
WaitForSingleObject (Address: 0x1800b7340)
WaitForSingleObjectEx (Address: 0x1800b7320)
WaitForThreadpoolTimerCallbacks (Address: 0x1800b7310)
WideCharToMultiByte (Address: 0x1800b74e0)
WriteConsoleW (Address: 0x1800b75c8)
WriteFile (Address: 0x1800b7598)

ntdll.dll

DbgPrint (Address: 0x1800b7748)
DbgPrintEx (Address: 0x1800b76b0)
LdrGetDllHandleEx (Address: 0x1800b7738)
LdrGetProcedureAddress (Address: 0x1800b7718)
LdrUnloadDll (Address: 0x1800b7730)
NtAdjustPrivilegesToken (Address: 0x1800b76d0)
NtClose (Address: 0x1800b77f8)
NtCreateFile (Address: 0x1800b77f0)
NtDelayExecution (Address: 0x1800b76c8)
NtDuplicateToken (Address: 0x1800b76e0)
NtFlushKey (Address: 0x1800b7808)
NtFsControlFile (Address: 0x1800b7830)
NtLoadKey2 (Address: 0x1800b77e0)
NtOpenFile (Address: 0x1800b77a8)
NtOpenKey (Address: 0x1800b7728)
NtOpenKeyEx (Address: 0x1800b7850)
NtOpenProcessToken (Address: 0x1800b76d8)
NtOpenThreadToken (Address: 0x1800b76e8)
NtQueryDirectoryFile (Address: 0x1800b7798)
NtQueryInformationFile (Address: 0x1800b7820)
NtQueryObject (Address: 0x1800b7680)
NtQueryPerformanceCounter (Address: 0x1800b7840)
NtQueryValueKey (Address: 0x1800b7750)
NtReadFile (Address: 0x1800b7778)
NtSetInformationThread (Address: 0x1800b7688)
NtUnloadKey2 (Address: 0x1800b7800)
NtWriteFile (Address: 0x1800b7720)
NtYieldExecution (Address: 0x1800b7690)
RtlAdjustPrivilege (Address: 0x1800b77d8)
RtlAllocateHeap (Address: 0x1800b77e8)
RtlCopyMappedMemory (Address: 0x1800b7788)
RtlCopyUnicodeString (Address: 0x1800b7848)
RtlCreateServiceSid (Address: 0x1800b77b8)
RtlCreateUnicodeString (Address: 0x1800b77d0)
RtlCreateUnicodeStringFromAsciiz (Address: 0x1800b7758)
RtlDeleteCriticalSection (Address: 0x1800b76f0)
RtlDosPathNameToNtPathName_U (Address: 0x1800b7828)
RtlDowncaseUnicodeChar (Address: 0x1800b76a8)
RtlEnterCriticalSection (Address: 0x1800b7700)
RtlEqualSid (Address: 0x1800b77c0)
RtlFormatCurrentUserKeyPath (Address: 0x1800b7698)
RtlFreeHeap (Address: 0x1800b7810)
RtlFreeUnicodeString (Address: 0x1800b7770)
RtlHashUnicodeString (Address: 0x1800b7838)
RtlInitializeCriticalSection (Address: 0x1800b7708)
RtlInitUnicodeString (Address: 0x1800b7678)
RtlLeaveCriticalSection (Address: 0x1800b7710)
RtlMapGenericMask (Address: 0x1800b77b0)
RtlNtStatusToDosError (Address: 0x1800b77c8)
RtlNtStatusToDosErrorNoTeb (Address: 0x1800b76c0)
RtlQueryEnvironmentVariable_U (Address: 0x1800b7740)
RtlRaiseStatus (Address: 0x1800b7818)
RtlReAllocateHeap (Address: 0x1800b76b8)
RtlTimeToTimeFields (Address: 0x1800b76f8)
RtlUpcaseUnicodeChar (Address: 0x1800b76a0)
ZwClose (Address: 0x1800b77a0)
ZwCreateSection (Address: 0x1800b7768)
ZwMapViewOfSection (Address: 0x1800b7780)
ZwQueryInformationFile (Address: 0x1800b7790)
ZwUnmapViewOfSection (Address: 0x1800b7760)