ServicingCommon.dll

Description: Servicing Base DLL

Version: 10.0.22621.5040

Architecture: 32-bit

Operating System: Windows NT

SHA256: 490b3bc0cdc328171fa9a4f17a457c3d

File Size: 775.5 KB

Uploaded At: Dec. 3, 2025, 2:37 a.m.

Views: 6

Exported Functions

CBSWdsLog (Ordinal: 1, Address: 0x361b0)
CreateKeyformFromAttributesIntoBuffer (Ordinal: 2, Address: 0x742a0)
RecursiveCopy (Ordinal: 3, Address: 0x36d10)
SetCustomLogging (Ordinal: 4, Address: 0x34d10)
CloseFileMapEnumerationInternal (Ordinal: 5, Address: 0x7a970)
RtlAppendLUnicodeStringToLUnicodeString (Ordinal: 6, Address: 0x68b80)
RtlAppendLUtf8StringToLUtf8String (Ordinal: 7, Address: 0x6a900)
RtlCommitSmartLBlobUcsWritingContext (Ordinal: 8, Address: 0x4d4c0)
RtlCommitSmartLBlobWritingContext (Ordinal: 9, Address: 0x4d4c0)
RtlConvertNtFilePathToWin32FilePath (Ordinal: 10, Address: 0x6f7c0)
RtlConvertNtRegistryPathToWin32RegistryPath (Ordinal: 11, Address: 0x6f730)
RtlConvertWin32FilePathToNtFilePath (Ordinal: 12, Address: 0x6f4f0)
RtlConvertWin32RegistryPathToNtRegistryPath (Ordinal: 13, Address: 0x6f340)
RtlCopyLUnicodeString (Ordinal: 14, Address: 0x68240)
RtlCopyLUtf8String (Ordinal: 15, Address: 0x6a210)
RtlCopyLUtf8StringToLUnicodeString (Ordinal: 16, Address: 0x6a370)
RtlCreateMicrodomUpdateContext (Ordinal: 17, Address: 0x3a990)
RtlCreateUpdatedMicrodomAsMicrodom (Ordinal: 18, Address: 0x3bcb0)
RtlCreateUpdatedMicrodomAsUtf8 (Ordinal: 19, Address: 0x3bba0)
RtlCreateXMLDSIGSession (Ordinal: 20, Address: 0x3edc0)
RtlDeallocateUnicodeString (Ordinal: 21, Address: 0x68180)
RtlDecodeUtf16LE (Ordinal: 22, Address: 0x70260)
RtlDecodeUtf8 (Ordinal: 23, Address: 0x6fff0)
RtlDestroyMicrodomUpdateContext (Ordinal: 24, Address: 0x3aa70)
RtlDowncaseUCSCharacter (Ordinal: 25, Address: 0x70460)
RtlDuplicateLBlob (Ordinal: 26, Address: 0x6bdf0)
RtlDuplicateLUnicodeString (Ordinal: 27, Address: 0x68300)
RtlDuplicateLUnicodeStringToLUtf8String (Ordinal: 28, Address: 0x6a4c0)
RtlDuplicateLUtf8String (Ordinal: 29, Address: 0x6a2d0)
RtlDuplicateLUtf8StringToLUnicodeString (Ordinal: 30, Address: 0x6a420)
RtlDuplicateNullTerminatedStringToLUnicodeString (Ordinal: 31, Address: 0x686d0)
RtlDuplicateUnicodeStringToLUnicodeString (Ordinal: 32, Address: 0x683a0)
RtlEncodeUtf16LE (Ordinal: 33, Address: 0x70780)
RtlEncodeUtf8 (Ordinal: 34, Address: 0x70600)
RtlFinalizeSmartLBlobUcsWritingContext (Ordinal: 35, Address: 0x25000)
RtlFinalizeSmartLBlobWritingContext (Ordinal: 36, Address: 0x25000)
RtlFreeLBlob (Ordinal: 37, Address: 0x6dc40)
RtlFreeLUnicodeString (Ordinal: 38, Address: 0x68230)
RtlFreeLUtf8String (Ordinal: 39, Address: 0x68230)
RtlGetEncodingSizeUcs2 (Ordinal: 40, Address: 0x70aa0)
RtlGetEncodingSizeUtf16 (Ordinal: 41, Address: 0x70a60)
RtlGetEncodingSizeUtf8 (Ordinal: 42, Address: 0x6b8f0)
RtlHashLUnicodeString (Ordinal: 43, Address: 0x6a1d0)
RtlHashLUtf8String (Ordinal: 44, Address: 0x6a1f0)
RtlInitLUnicodeStringFromNullTerminatedString (Ordinal: 45, Address: 0x68640)
RtlInitLUnicodeStringFromUnicodeString (Ordinal: 46, Address: 0x68500)
RtlInitUnicodeStringFromLUnicodeString (Ordinal: 47, Address: 0x68570)
RtlIsLBlobValid (Ordinal: 48, Address: 0x6dba0)
RtlIsLUnicodeStringValid (Ordinal: 49, Address: 0x6a1a0)
RtlIsLUtf8StringValid (Ordinal: 50, Address: 0x6b2e0)
RtlLengthOfUcsCharacterEncodedAsUtf8 (Ordinal: 51, Address: 0x6b8f0)
RtlMicrodomUpdateCreateAttributeNs (Ordinal: 52, Address: 0x3add0)
RtlMicrodomUpdateCreateElementNs (Ordinal: 53, Address: 0x3aae0)
RtlMicrodomUpdateCreateTextual (Ordinal: 54, Address: 0x3ace0)
RtlMicrodomUpdateGetCookieForExistingAttribute (Ordinal: 55, Address: 0x3afc0)
RtlMicrodomUpdateGetCookieForExistingNode (Ordinal: 56, Address: 0x3af30)
RtlMicrodomUpdateInsertChild (Ordinal: 57, Address: 0x3b250)
RtlMicrodomUpdateInsertMicrodomNodeEx (Ordinal: 58, Address: 0x3b950)
RtlMicrodomUpdateRemoveChild (Ordinal: 59, Address: 0x3b360)
RtlMicrodomUpdateRemoveElement (Ordinal: 60, Address: 0x3b420)
RtlMicrodomUpdateSetNodeName (Ordinal: 61, Address: 0x3b160)
RtlMicrodomUpdateSetNodeTextContent (Ordinal: 62, Address: 0x3b060)
RtlPreInitializeSmartLBlobUcsWritingContext (Ordinal: 63, Address: 0x6b480)
RtlPreInitializeSmartLBlobWritingContext (Ordinal: 64, Address: 0x6d700)
RtlSmartMultiUcsEncoder_Utf16LE (Ordinal: 65, Address: 0x6b8d0)
RtlSmartMultiUcsEncoder_Utf8 (Ordinal: 66, Address: 0x6b870)
RtlSmartUcsEncoder_Utf16LE (Ordinal: 67, Address: 0x6b890)
RtlSmartUcsEncoder_Utf8 (Ordinal: 68, Address: 0x6b830)
RtlSplitWin32RegistryPathIntoRootAndLeaves (Ordinal: 69, Address: 0x6f360)
RtlUpcaseUCSCharacter (Ordinal: 70, Address: 0x704a0)
RtlWriteDataIntoSmartLBlobWritingContext (Ordinal: 71, Address: 0x6d900)
BeginFileMapEnumerationInternal (Ordinal: 72, Address: 0x7a710)
CbsCreateOfflineSession (Ordinal: 73, Address: 0x25030)
CbsCreateOfflineSessionFromStackInImage (Ordinal: 74, Address: 0x2a1d0)
CbsFindServicingStackDirectory (Ordinal: 75, Address: 0x24c80)
CbsGetSsBinaryPathFromTargetImage (Ordinal: 76, Address: 0x2a220)
CbsLoadSssFromTargetImage (Ordinal: 77, Address: 0x2a1f0)
CbsOfflineFinalize (Ordinal: 78, Address: 0x25050)
CbsOfflineFinalizeNoShutdownImageStack (Ordinal: 79, Address: 0x25060)
CbsOfflineSetLogFile (Ordinal: 80, Address: 0x253e0)
CbsShutdownImageStack (Ordinal: 81, Address: 0x2a1c0)
CompareObjectSDToSddl (Ordinal: 82, Address: 0x7b050)
ConvertHResultToNtStatus (Ordinal: 83, Address: 0x71ab0)
ConvertNtStatusToHResult (Ordinal: 84, Address: 0x71680)
DecompressManifest (Ordinal: 85, Address: 0x75490)
EstimateReconstructWindowsDiskNeeds (Ordinal: 86, Address: 0x2cf80)
EstimateReconstructWindowsRAMNeeds (Ordinal: 87, Address: 0x2d1d0)
FileVersionFromString (Ordinal: 88, Address: 0x37080)
GetCWcpDll (Ordinal: 89, Address: 0x73e70)
GetIdentityAuthority (Ordinal: 90, Address: 0x7d090)
GetLoadedHiveKeyName (Ordinal: 91, Address: 0x72070)
GetNextFileMapContentInternal (Ordinal: 92, Address: 0x7a9a0)
GetTemporaryPath (Ordinal: 93, Address: 0x72540)
GetUpdateReserveManagerLoader (Ordinal: 94, Address: 0x79a50)
IsKeyProtected (Ordinal: 95, Address: 0x7b760)
IsLuaCdfFile (Ordinal: 96, Address: 0x7a9d0)
LoadUpdateReserveManager (Ordinal: 97, Address: 0x79b00)
ReconstructWindowsEx2 (Ordinal: 98, Address: 0x2d240)
ReconstructWindowsEx (Ordinal: 99, Address: 0x2d200)
RemoveFileProtection (Ordinal: 100, Address: 0x7bae0)
RemoveRegKeyProtection (Ordinal: 101, Address: 0x7c200)
RtlAllocateLBlob (Ordinal: 102, Address: 0x6dbd0)
RtlAllocateLUnicodeString (Ordinal: 103, Address: 0x681a0)
RtlAllocateLUtf8String (Ordinal: 104, Address: 0x6b310)
RtlAllocateUnicodeString (Ordinal: 105, Address: 0x680f0)
RtlAppendUcsCharacterToLUnicodeString (Ordinal: 106, Address: 0x69770)
RtlAppendUcsCharacterToLUtf8String (Ordinal: 107, Address: 0x6a9f0)
RtlAppendUcsCharactersToLUnicodeString (Ordinal: 108, Address: 0x69630)
RtlBase64EncodeLBlobToLUnicodeString (Ordinal: 109, Address: 0x6cd10)
RtlBase64EncodeLBlobToLUtf8String (Ordinal: 110, Address: 0x6ce80)
RtlCalculateUtf16StringLengthFromLUtf8String (Ordinal: 111, Address: 0x6b1c0)
RtlCompareEncodedLBlobs (Ordinal: 112, Address: 0x6e2e0)
RtlCompareLUnicodeStringToLUtf8String (Ordinal: 113, Address: 0x6b360)
RtlCompareLUnicodeStrings (Ordinal: 114, Address: 0x684d0)
RtlCompareLUtf8StringToLUnicodeString (Ordinal: 115, Address: 0x6a560)
RtlCompareLUtf8Strings (Ordinal: 116, Address: 0x6b330)
RtlConcatenateLUnicodeStrings (Ordinal: 117, Address: 0x689b0)
RtlConcatenateLUtf8Strings (Ordinal: 118, Address: 0x6a730)
RtlCreateDefaultMicrodomXmlWriter (Ordinal: 119, Address: 0x4c520)
RtlCreateDefaultXmlWriter (Ordinal: 120, Address: 0x4d4d0)
RtlCreateFilteringMicrodomWriter (Ordinal: 121, Address: 0x4e690)
RtlCreateMicrodom (Ordinal: 122, Address: 0x53570)
RtlCreateUtf16LEUCSStringBuilder (Ordinal: 123, Address: 0x71200)
RtlCreateUtf8UCSStringBuilder (Ordinal: 124, Address: 0x70fe0)
RtlDecodeBase64LUnicodeStringToLBlob (Ordinal: 125, Address: 0x6d5a0)
RtlDecodeBase64LUtf8StringToLBlob (Ordinal: 126, Address: 0x6d410)
RtlDestroyGrowingList (Ordinal: 127, Address: 0x549a0)
RtlDetermineFilteredLUnicodeStringLength (Ordinal: 128, Address: 0x69ed0)
RtlDetermineTranscodedLBlobSize (Ordinal: 129, Address: 0x6bf00)
RtlDoesLUnicodeStringMatchExpression (Ordinal: 130, Address: 0x697e0)
RtlDuplicateLUnicodeStringToUnicodeString (Ordinal: 131, Address: 0x68d80)
RtlEqualLUnicodeStringPrefix (Ordinal: 132, Address: 0x68e90)
RtlEqualLUnicodeStrings (Ordinal: 133, Address: 0x68ee0)
RtlEqualLUtf8StringPrefix (Ordinal: 134, Address: 0x6b390)
RtlEqualLUtf8Strings (Ordinal: 135, Address: 0x6ab70)
RtlExecuteXPathOverMicrodom (Ordinal: 136, Address: 0x56190)
RtlFilterLUnicodeString (Ordinal: 137, Address: 0x6a050)
RtlGetHashAlgorithmHashLength (Ordinal: 138, Address: 0x6c710)
RtlHashLBlob (Ordinal: 139, Address: 0x6c7f0)
RtlIndexIntoGrowingList (Ordinal: 140, Address: 0x548d0)
RtlInitializeGrowingList (Ordinal: 141, Address: 0x54780)
RtlInitializeSmartLBlobWritingContext (Ordinal: 142, Address: 0x6d720)
RtlInitializeSmartLUnicodeStringWritingContext (Ordinal: 143, Address: 0x6b4b0)
RtlInitializeSmartLUtf8StringWritingContext (Ordinal: 144, Address: 0x6b580)
RtlMatchEncodedLBlobAgainstList (Ordinal: 145, Address: 0x6eec0)
RtlMatchEncodedLBlobAgainstPointerList (Ordinal: 146, Address: 0x6ef50)
RtlMatchLUnicodeStringAgainstLUtf8StringList (Ordinal: 147, Address: 0x690a0)
RtlMatchLUnicodeStringAgainstLUtf8StringPointerList (Ordinal: 148, Address: 0x69330)
RtlMatchLUnicodeStringAgainstList (Ordinal: 149, Address: 0x68f50)
RtlMatchLUnicodeStringAgainstPointerList (Ordinal: 150, Address: 0x691f0)
RtlMatchLUtf8StringAgainstLUnicodeStringList (Ordinal: 151, Address: 0x6ad50)
RtlMatchLUtf8StringAgainstLUnicodeStringPointerList (Ordinal: 152, Address: 0x6afe0)
RtlMatchLUtf8StringAgainstList (Ordinal: 153, Address: 0x6ac00)
RtlMatchLUtf8StringAgainstPointerList (Ordinal: 154, Address: 0x6aea0)
RtlMurmurHashLBlob (Ordinal: 155, Address: 0x71430)
RtlNsDestroy (Ordinal: 156, Address: 0x56730)
RtlNsInitialize (Ordinal: 157, Address: 0x566b0)
RtlReallocateLBlob (Ordinal: 158, Address: 0x6bc40)
RtlReallocateLUnicodeString (Ordinal: 159, Address: 0x69580)
RtlReallocateLUtf8String (Ordinal: 160, Address: 0x6b120)
RtlReallocateUnicodeString (Ordinal: 161, Address: 0x69470)
RtlRegisterErrorOriginationCallback (Ordinal: 162, Address: 0x71460)
RtlReportErrorOrigination (Ordinal: 163, Address: 0x714a0)
RtlReportErrorPropagation (Ordinal: 164, Address: 0x71480)
RtlSplitEncodedLBlob (Ordinal: 165, Address: 0x6c1e0)
RtlSplitLUnicodeString (Ordinal: 166, Address: 0x68760)
RtlSplitLUtf8String (Ordinal: 167, Address: 0x6a590)
RtlTranscodeLBlobs (Ordinal: 168, Address: 0x6dc60)
RtlWriteDecodedUcsDataIntoSmartLBlobUcsWritingContext (Ordinal: 169, Address: 0x6b650)
RtlWriteMicrodomXml (Ordinal: 170, Address: 0x4c5c0)
RtlXmlDefaultCompareStrings (Ordinal: 171, Address: 0x56c90)
RtlXmlDestroyNextLogicalThing (Ordinal: 172, Address: 0x5a470)
RtlXmlDetermineStreamEncoding (Ordinal: 173, Address: 0x5a1d0)
RtlXmlExtentToString (Ordinal: 174, Address: 0x5c400)
RtlXmlInitializeNextLogicalThing (Ordinal: 175, Address: 0x5a490)
RtlXmlInitializeTokenization (Ordinal: 176, Address: 0x5a0f0)
RtlXmlNextLogicalThing (Ordinal: 177, Address: 0x5aa70)
RtlXmlNextToken (Ordinal: 178, Address: 0x58e30)
SczAlloc (Ordinal: 179, Address: 0x378d0)
SczAllocConcat2Sz (Ordinal: 180, Address: 0x37c50)
SczAllocConcatSz (Ordinal: 181, Address: 0x37b10)
SczAllocFormatted (Ordinal: 182, Address: 0x37df0)
SczAllocFromAnsiSz (Ordinal: 183, Address: 0x38140)
SczAllocFromSz (Ordinal: 184, Address: 0x37fd0)
SczAllocPrefixSz (Ordinal: 185, Address: 0x379a0)
SczEnsureBackslashTerminated (Ordinal: 186, Address: 0x382a0)
SczFree (Ordinal: 187, Address: 0x38280)
SfpCreateOfflineRepairObject (Ordinal: 188, Address: 0x79610)
SfpUnload (Ordinal: 189, Address: 0x79830)
StringsAreEqualCaseInsensitive (Ordinal: 190, Address: 0x383c0)
SzEnsureBackslashTerminated (Ordinal: 191, Address: 0x38310)
UninstallWindows (Ordinal: 192, Address: 0x804a0)

Imported DLLs & Functions

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x100b7048)
AcquireSRWLockShared (Address: 0x100b7050)
CloseHandle (Address: 0x100b705c)
CloseThreadpoolTimer (Address: 0x100b7070)
CompareFileTime (Address: 0x100b70e0)
CompareStringOrdinal (Address: 0x100b7120)
CopyFileExW (Address: 0x100b70c4)
CopyFileW (Address: 0x100b7094)
CreateDirectoryW (Address: 0x100b7090)
CreateEventW (Address: 0x100b71cc)
CreateFileW (Address: 0x100b70c8)
CreateHardLinkW (Address: 0x100b70d8)
CreateMutexExW (Address: 0x100b70ac)
CreateSemaphoreExW (Address: 0x100b70b0)
CreateThreadpoolTimer (Address: 0x100b708c)
DebugBreak (Address: 0x100b7038)
DecodePointer (Address: 0x100b7108)
DelayLoadFailureHook (Address: 0x100b7204)
DeleteCriticalSection (Address: 0x100b7080)
DeleteFileW (Address: 0x100b70a0)
DeviceIoControl (Address: 0x100b7104)
EncodePointer (Address: 0x100b71f4)
EnterCriticalSection (Address: 0x100b7078)
EnumResourceLanguagesExW (Address: 0x100b7218)
ExitProcess (Address: 0x100b7178)
ExpandEnvironmentStringsW (Address: 0x100b7000)
FindClose (Address: 0x100b70dc)
FindFirstFileExW (Address: 0x100b70d0)
FindFirstFileW (Address: 0x100b70e4)
FindNextFileW (Address: 0x100b70d4)
FindResourceExW (Address: 0x100b7210)
FlsAlloc (Address: 0x100b71e4)
FlsFree (Address: 0x100b71f0)
FlsGetValue (Address: 0x100b71e8)
FlsSetValue (Address: 0x100b71ec)
FlushFileBuffers (Address: 0x100b711c)
FormatMessageW (Address: 0x100b701c)
FreeEnvironmentStringsW (Address: 0x100b7128)
FreeLibrary (Address: 0x100b7018)
GetACP (Address: 0x100b7184)
GetCommandLineA (Address: 0x100b7200)
GetCommandLineW (Address: 0x100b71fc)
GetCompressedFileSizeW (Address: 0x100b70bc)
GetConsoleMode (Address: 0x100b71b0)
GetConsoleOutputCP (Address: 0x100b71ac)
GetCPInfo (Address: 0x100b718c)
GetCurrentProcess (Address: 0x100b7130)
GetCurrentProcessId (Address: 0x100b70a8)
GetCurrentThreadId (Address: 0x100b7020)
GetDiskFreeSpaceW (Address: 0x100b70b8)
GetEnvironmentStringsW (Address: 0x100b71f8)
GetEnvironmentVariableW (Address: 0x100b70ec)
GetErrorMode (Address: 0x100b7098)
GetFileAttributesExW (Address: 0x100b7114)
GetFileAttributesW (Address: 0x100b7008)
GetFileSizeEx (Address: 0x100b7100)
GetFileType (Address: 0x100b719c)
GetLastError (Address: 0x100b7004)
GetLocalTime (Address: 0x100b7164)
GetModuleFileNameA (Address: 0x100b7034)
GetModuleFileNameW (Address: 0x100b712c)
GetModuleHandleExW (Address: 0x100b7030)
GetModuleHandleW (Address: 0x100b703c)
GetOEMCP (Address: 0x100b7188)
GetProcAddress (Address: 0x100b7010)
GetProcessHeap (Address: 0x100b7028)
GetStartupInfoW (Address: 0x100b71a0)
GetStdHandle (Address: 0x100b7198)
GetStringTypeW (Address: 0x100b717c)
GetSystemTime (Address: 0x100b70f4)
GetSystemTimeAsFileTime (Address: 0x100b70cc)
GetSystemWindowsDirectoryW (Address: 0x100b7118)
GetTempPathW (Address: 0x100b7150)
GetWindowsDirectoryW (Address: 0x100b7154)
HeapAlloc (Address: 0x100b7024)
HeapFree (Address: 0x100b702c)
HeapReAlloc (Address: 0x100b71c8)
HeapSize (Address: 0x100b71c4)
InitializeCriticalSectionAndSpinCount (Address: 0x100b7190)
InitializeCriticalSectionEx (Address: 0x100b707c)
InitializeSListHead (Address: 0x100b71d4)
InterlockedFlushSList (Address: 0x100b71dc)
IsDebuggerPresent (Address: 0x100b7040)
IsProcessorFeaturePresent (Address: 0x100b7174)
IsValidCodePage (Address: 0x100b7180)
LCMapStringW (Address: 0x100b7194)
LeaveCriticalSection (Address: 0x100b70b4)
LoadLibraryExA (Address: 0x100b7208)
LoadLibraryExW (Address: 0x100b700c)
LoadLibraryW (Address: 0x100b70f0)
LoadResource (Address: 0x100b720c)
LocalAlloc (Address: 0x100b714c)
LocalFree (Address: 0x100b7138)
LockResource (Address: 0x100b7214)
lstrcmpiW (Address: 0x100b7158)
lstrcmpW (Address: 0x100b7160)
MoveFileExW (Address: 0x100b70c0)
MultiByteToWideChar (Address: 0x100b7124)
OpenSemaphoreW (Address: 0x100b7088)
OutputDebugStringA (Address: 0x100b70e8)
OutputDebugStringW (Address: 0x100b7044)
PrivCopyFileExW (Address: 0x100b70f8)
QueryPerformanceCounter (Address: 0x100b71d0)
RaiseException (Address: 0x100b71e0)
ReadConsoleW (Address: 0x100b71b8)
ReadFile (Address: 0x100b70fc)
ReleaseMutex (Address: 0x100b7064)
ReleaseSemaphore (Address: 0x100b7060)
ReleaseSRWLockExclusive (Address: 0x100b704c)
ReleaseSRWLockShared (Address: 0x100b7054)
RemoveDirectoryW (Address: 0x100b70a4)
RtlUnwind (Address: 0x100b71d8)
SetCurrentDirectoryW (Address: 0x100b715c)
SetEndOfFile (Address: 0x100b71b4)
SetEnvironmentVariableW (Address: 0x100b7014)
SetErrorMode (Address: 0x100b709c)
SetFilePointer (Address: 0x100b710c)
SetFilePointerEx (Address: 0x100b71bc)
SetLastError (Address: 0x100b7058)
SetStdHandle (Address: 0x100b71a4)
SetThreadpoolTimer (Address: 0x100b7068)
SetUnhandledExceptionFilter (Address: 0x100b7170)
SizeofResource (Address: 0x100b721c)
Sleep (Address: 0x100b7110)
TerminateProcess (Address: 0x100b7134)
TlsAlloc (Address: 0x100b7140)
TlsFree (Address: 0x100b7148)
TlsGetValue (Address: 0x100b7144)
TlsSetValue (Address: 0x100b713c)
UnhandledExceptionFilter (Address: 0x100b716c)
WaitForSingleObject (Address: 0x100b7084)
WaitForSingleObjectEx (Address: 0x100b7074)
WaitForThreadpoolTimerCallbacks (Address: 0x100b706c)
WideCharToMultiByte (Address: 0x100b7168)
WriteConsoleW (Address: 0x100b71c0)
WriteFile (Address: 0x100b71a8)

ntdll.dll

DbgPrint (Address: 0x100b728c)
DbgPrintEx (Address: 0x100b7240)
LdrGetDllHandleEx (Address: 0x100b7284)
LdrGetProcedureAddress (Address: 0x100b7274)
LdrUnloadDll (Address: 0x100b7280)
NtAdjustPrivilegesToken (Address: 0x100b7250)
NtClose (Address: 0x100b72e4)
NtCreateFile (Address: 0x100b72e0)
NtDelayExecution (Address: 0x100b724c)
NtDuplicateToken (Address: 0x100b7258)
NtFlushKey (Address: 0x100b72ec)
NtFsControlFile (Address: 0x100b7300)
NtLoadKey2 (Address: 0x100b72d8)
NtOpenFile (Address: 0x100b72bc)
NtOpenKey (Address: 0x100b727c)
NtOpenKeyEx (Address: 0x100b7310)
NtOpenProcessToken (Address: 0x100b7254)
NtOpenThreadToken (Address: 0x100b725c)
NtQueryDirectoryFile (Address: 0x100b72b4)
NtQueryInformationFile (Address: 0x100b72f8)
NtQueryObject (Address: 0x100b7228)
NtQueryPerformanceCounter (Address: 0x100b7308)
NtQueryValueKey (Address: 0x100b7290)
NtReadFile (Address: 0x100b72a4)
NtSetInformationThread (Address: 0x100b722c)
NtUnloadKey2 (Address: 0x100b72e8)
NtWriteFile (Address: 0x100b7278)
NtYieldExecution (Address: 0x100b7230)
RtlAdjustPrivilege (Address: 0x100b72d4)
RtlAllocateHeap (Address: 0x100b72dc)
RtlCopyMappedMemory (Address: 0x100b72ac)
RtlCopyUnicodeString (Address: 0x100b730c)
RtlCreateServiceSid (Address: 0x100b72c4)
RtlCreateUnicodeString (Address: 0x100b72d0)
RtlCreateUnicodeStringFromAsciiz (Address: 0x100b7294)
RtlDeleteCriticalSection (Address: 0x100b7260)
RtlDosPathNameToNtPathName_U (Address: 0x100b72fc)
RtlDowncaseUnicodeChar (Address: 0x100b723c)
RtlEnterCriticalSection (Address: 0x100b7268)
RtlEqualSid (Address: 0x100b72c8)
RtlFormatCurrentUserKeyPath (Address: 0x100b7234)
RtlFreeHeap (Address: 0x100b72f0)
RtlFreeUnicodeString (Address: 0x100b72a0)
RtlHashUnicodeString (Address: 0x100b7304)
RtlInitializeCriticalSection (Address: 0x100b726c)
RtlInitUnicodeString (Address: 0x100b7224)
RtlLeaveCriticalSection (Address: 0x100b7270)
RtlMapGenericMask (Address: 0x100b72c0)
RtlNtStatusToDosError (Address: 0x100b72cc)
RtlNtStatusToDosErrorNoTeb (Address: 0x100b7248)
RtlQueryEnvironmentVariable_U (Address: 0x100b7288)
RtlRaiseStatus (Address: 0x100b72f4)
RtlReAllocateHeap (Address: 0x100b7244)
RtlTimeToTimeFields (Address: 0x100b7264)
RtlUpcaseUnicodeChar (Address: 0x100b7238)
ZwClose (Address: 0x100b72b8)
ZwCreateSection (Address: 0x100b729c)
ZwMapViewOfSection (Address: 0x100b72a8)
ZwQueryInformationFile (Address: 0x100b72b0)
ZwUnmapViewOfSection (Address: 0x100b7298)