ServicingCommon.dll

Description: Servicing Base DLL

Version: 10.0.26100.4654

Architecture: Unknown (0xaa64)

Operating System: Windows NT

SHA256: 261fe189b340cfe21d06548950f7ff0f

File Size: 1.6 MB

Uploaded At: Dec. 3, 2025, 2:37 a.m.

Views: 6

Exported Functions

CBSWdsLog (Ordinal: 1, Address: 0x45920)
CreateKeyformFromAttributesIntoBuffer (Ordinal: 2, Address: 0x7c3f0)
RecursiveCopy (Ordinal: 3, Address: 0x47430)
SetCustomLogging (Ordinal: 4, Address: 0x46150)
BeginFileMapEnumerationInternal (Ordinal: 5, Address: 0x84fd0)
CbsCreateOfflineSession (Ordinal: 6, Address: 0x281c0)
CbsCreateOfflineSessionFromStackInImage (Ordinal: 7, Address: 0x32b00)
CbsFindServicingStackDirectory (Ordinal: 8, Address: 0x27950)
CbsGetSsBinaryPathFromTargetImage (Ordinal: 9, Address: 0x32b20)
CbsLoadSssFromTargetImage (Ordinal: 10, Address: 0x32b80)
CbsOfflineFinalize (Ordinal: 11, Address: 0x281e0)
CbsOfflineFinalizeNoShutdownImageStack (Ordinal: 12, Address: 0x281f0)
CbsOfflineSetLogFile (Ordinal: 13, Address: 0xca630)
CbsShutdownImageStack (Ordinal: 14, Address: 0x32ba0)
CloseFileMapEnumerationInternal (Ordinal: 15, Address: 0x85310)
CompareObjectSDToSddl (Ordinal: 16, Address: 0x85790)
ConvertHResultToNtStatus (Ordinal: 17, Address: 0x1246f0)
ConvertNtStatusToHResult (Ordinal: 18, Address: 0x124aa0)
DecompressManifest (Ordinal: 19, Address: 0x7d520)
EstimateReconstructWindowsDiskNeeds (Ordinal: 20, Address: 0x3bfa0)
EstimateReconstructWindowsRAMNeeds (Ordinal: 21, Address: 0x3c370)
FileVersionFromString (Ordinal: 22, Address: 0x48c00)
GetCWcpDll (Ordinal: 23, Address: 0x7ba80)
GetIdentityAuthority (Ordinal: 24, Address: 0x8ae80)
GetLoadedHiveKeyName (Ordinal: 25, Address: 0x79180)
GetNextFileMapContentInternal (Ordinal: 26, Address: 0x853c0)
GetTemporaryPath (Ordinal: 27, Address: 0x792d0)
GetUpdateReserveManagerLoader (Ordinal: 28, Address: 0x844a0)
IsKeyProtected (Ordinal: 29, Address: 0x862c0)
IsLuaCdfFile (Ordinal: 30, Address: 0x853d0)
LoadUpdateReserveManager (Ordinal: 31, Address: 0x845e0)
ReconstructWindowsEx (Ordinal: 32, Address: 0x3c3b0)
ReconstructWindowsEx2 (Ordinal: 33, Address: 0x3c400)
RemoveFileProtection (Ordinal: 34, Address: 0x86ff0)
RemoveRegKeyProtection (Ordinal: 35, Address: 0x872e0)
RtlAllocateLBlob (Ordinal: 36, Address: 0x6d640)
RtlAllocateLUnicodeString (Ordinal: 37, Address: 0x710b0)
RtlAllocateLUtf8String (Ordinal: 38, Address: 0x73cf0)
RtlAllocateUnicodeString (Ordinal: 39, Address: 0x711a0)
RtlAppendLUnicodeStringToLUnicodeString (Ordinal: 40, Address: 0x71290)
RtlAppendLUtf8StringToLUtf8String (Ordinal: 41, Address: 0x73d00)
RtlAppendUcsCharacterToLUnicodeString (Ordinal: 42, Address: 0x715f0)
RtlAppendUcsCharacterToLUtf8String (Ordinal: 43, Address: 0x73ea0)
RtlAppendUcsCharactersToLUnicodeString (Ordinal: 44, Address: 0x71620)
RtlBase64EncodeLBlobToLUnicodeString (Ordinal: 45, Address: 0x6d870)
RtlBase64EncodeLBlobToLUtf8String (Ordinal: 46, Address: 0x6da90)
RtlCalculateUtf16StringLengthFromLUtf8String (Ordinal: 47, Address: 0x74000)
RtlCommitSmartLBlobUcsWritingContext (Ordinal: 48, Address: 0xdac70)
RtlCommitSmartLBlobWritingContext (Ordinal: 49, Address: 0xdac70)
RtlCompareEncodedLBlobs (Ordinal: 50, Address: 0x6dcb0)
RtlCompareLUnicodeStringToLUtf8String (Ordinal: 51, Address: 0x741f0)
RtlCompareLUnicodeStrings (Ordinal: 52, Address: 0x71800)
RtlCompareLUtf8StringToLUnicodeString (Ordinal: 53, Address: 0x74210)
RtlCompareLUtf8Strings (Ordinal: 54, Address: 0x74230)
RtlConcatenateLUnicodeStrings (Ordinal: 55, Address: 0x71820)
RtlConcatenateLUtf8Strings (Ordinal: 56, Address: 0x74250)
RtlConvertNtFilePathToWin32FilePath (Ordinal: 57, Address: 0x769f0)
RtlConvertNtRegistryPathToWin32RegistryPath (Ordinal: 58, Address: 0x76d80)
RtlConvertWin32FilePathToNtFilePath (Ordinal: 59, Address: 0x76e60)
RtlConvertWin32RegistryPathToNtRegistryPath (Ordinal: 60, Address: 0x77170)
RtlCopyLUnicodeString (Ordinal: 61, Address: 0x71aa0)
RtlCopyLUtf8String (Ordinal: 62, Address: 0x744d0)
RtlCopyLUtf8StringToLUnicodeString (Ordinal: 63, Address: 0x74620)
RtlCreateDefaultMicrodomXmlWriter (Ordinal: 64, Address: 0x4e0c0)
RtlCreateDefaultXmlWriter (Ordinal: 65, Address: 0x4fe20)
RtlCreateFilteringMicrodomWriter (Ordinal: 66, Address: 0x51150)
RtlCreateMicrodom (Ordinal: 67, Address: 0x587a0)
RtlCreateMicrodomUpdateContext (Ordinal: 68, Address: 0x5c630)
RtlCreateUpdatedMicrodomAsMicrodom (Ordinal: 69, Address: 0x5c770)
RtlCreateUpdatedMicrodomAsUtf8 (Ordinal: 70, Address: 0x5c8c0)
RtlCreateUtf16LEUCSStringBuilder (Ordinal: 71, Address: 0x77ee0)
RtlCreateUtf8UCSStringBuilder (Ordinal: 72, Address: 0x78080)
RtlDeallocateUnicodeString (Ordinal: 73, Address: 0x71bf0)
RtlDecodeBase64LUnicodeStringToLBlob (Ordinal: 74, Address: 0x6e1c0)
RtlDecodeBase64LUtf8StringToLBlob (Ordinal: 75, Address: 0x6e3d0)
RtlDecodeUtf16LE (Ordinal: 76, Address: 0x123560)
RtlDecodeUtf8 (Ordinal: 77, Address: 0x123620)
RtlDestroyGrowingList (Ordinal: 78, Address: 0x5dd10)
RtlDestroyMicrodomUpdateContext (Ordinal: 79, Address: 0x5ca20)
RtlDetermineFilteredLUnicodeStringLength (Ordinal: 80, Address: 0x71c20)
RtlDetermineTranscodedLBlobSize (Ordinal: 81, Address: 0x6e600)
RtlDoesLUnicodeStringMatchExpression (Ordinal: 82, Address: 0x71dc0)
RtlDowncaseUCSCharacter (Ordinal: 83, Address: 0x123a20)
RtlDuplicateLBlob (Ordinal: 84, Address: 0x6ea20)
RtlDuplicateLUnicodeString (Ordinal: 85, Address: 0x72390)
RtlDuplicateLUnicodeStringToLUtf8String (Ordinal: 86, Address: 0x74760)
RtlDuplicateLUnicodeStringToUnicodeString (Ordinal: 87, Address: 0x724a0)
RtlDuplicateLUtf8String (Ordinal: 88, Address: 0x74860)
RtlDuplicateLUtf8StringToLUnicodeString (Ordinal: 89, Address: 0x74970)
RtlDuplicateNullTerminatedStringToLUnicodeString (Ordinal: 90, Address: 0x72640)
RtlDuplicateUnicodeStringToLUnicodeString (Ordinal: 91, Address: 0x72710)
RtlEncodeUtf16LE (Ordinal: 92, Address: 0x123ce0)
RtlEncodeUtf8 (Ordinal: 93, Address: 0x123e80)
RtlEqualLUnicodeStringPrefix (Ordinal: 94, Address: 0x72820)
RtlEqualLUnicodeStrings (Ordinal: 95, Address: 0x72890)
RtlEqualLUtf8StringPrefix (Ordinal: 96, Address: 0x74a70)
RtlEqualLUtf8Strings (Ordinal: 97, Address: 0x74be0)
RtlExecuteXPathOverMicrodom (Ordinal: 98, Address: 0x5fd60)
RtlFilterLUnicodeString (Ordinal: 99, Address: 0x72950)
RtlFinalizeSmartLBlobUcsWritingContext (Ordinal: 100, Address: 0xcacb0)
RtlFinalizeSmartLBlobWritingContext (Ordinal: 101, Address: 0xcacb0)
RtlFreeLBlob (Ordinal: 102, Address: 0x6eba0)
RtlFreeLUnicodeString (Ordinal: 103, Address: 0x6eba0)
RtlFreeLUtf8String (Ordinal: 104, Address: 0x6eba0)
RtlGetEncodingSizeUcs2 (Ordinal: 105, Address: 0x1241f0)
RtlGetEncodingSizeUtf16 (Ordinal: 106, Address: 0x124220)
RtlGetEncodingSizeUtf8 (Ordinal: 107, Address: 0x120990)
RtlGetHashAlgorithmHashLength (Ordinal: 108, Address: 0x6ebd0)
RtlHashLBlob (Ordinal: 109, Address: 0x6f4d0)
RtlHashLUnicodeString (Ordinal: 110, Address: 0x72ad0)
RtlHashLUtf8String (Ordinal: 111, Address: 0x74cc0)
RtlIndexIntoGrowingList (Ordinal: 112, Address: 0x5ddc0)
RtlInitLUnicodeStringFromNullTerminatedString (Ordinal: 113, Address: 0x72af0)
RtlInitLUnicodeStringFromUnicodeString (Ordinal: 114, Address: 0x72ba0)
RtlInitUnicodeStringFromLUnicodeString (Ordinal: 115, Address: 0x72c40)
RtlInitializeGrowingList (Ordinal: 116, Address: 0x107660)
RtlInitializeSmartLBlobWritingContext (Ordinal: 117, Address: 0x6f7e0)
RtlInitializeSmartLUnicodeStringWritingContext (Ordinal: 118, Address: 0x75cb0)
RtlInitializeSmartLUtf8StringWritingContext (Ordinal: 119, Address: 0x75e10)
RtlIsLBlobValid (Ordinal: 120, Address: 0x119800)
RtlIsLUnicodeStringValid (Ordinal: 121, Address: 0x11d860)
RtlIsLUtf8StringValid (Ordinal: 122, Address: 0x11fb70)
RtlLengthOfUcsCharacterEncodedAsUtf8 (Ordinal: 123, Address: 0x120990)
RtlMatchEncodedLBlobAgainstList (Ordinal: 124, Address: 0x6f9b0)
RtlMatchEncodedLBlobAgainstPointerList (Ordinal: 125, Address: 0x6fa70)
RtlMatchLUnicodeStringAgainstLUtf8StringList (Ordinal: 126, Address: 0x72df0)
RtlMatchLUnicodeStringAgainstLUtf8StringPointerList (Ordinal: 127, Address: 0x73000)
RtlMatchLUnicodeStringAgainstList (Ordinal: 128, Address: 0x73210)
RtlMatchLUnicodeStringAgainstPointerList (Ordinal: 129, Address: 0x73420)
RtlMatchLUtf8StringAgainstLUnicodeStringList (Ordinal: 130, Address: 0x74ce0)
RtlMatchLUtf8StringAgainstLUnicodeStringPointerList (Ordinal: 131, Address: 0x74ef0)
RtlMatchLUtf8StringAgainstList (Ordinal: 132, Address: 0x75100)
RtlMatchLUtf8StringAgainstPointerList (Ordinal: 133, Address: 0x75310)
RtlMicrodomUpdateCreateAttributeNs (Ordinal: 134, Address: 0x5cac0)
RtlMicrodomUpdateCreateElementNs (Ordinal: 135, Address: 0x5ccb0)
RtlMicrodomUpdateCreateTextual (Ordinal: 136, Address: 0x5cf70)
RtlMicrodomUpdateGetCookieForExistingAttribute (Ordinal: 137, Address: 0x5d0d0)
RtlMicrodomUpdateGetCookieForExistingNode (Ordinal: 138, Address: 0x5d190)
RtlMicrodomUpdateInsertChild (Ordinal: 139, Address: 0x5d250)
RtlMicrodomUpdateInsertMicrodomNodeEx (Ordinal: 140, Address: 0x5d400)
RtlMicrodomUpdateRemoveChild (Ordinal: 141, Address: 0x5d700)
RtlMicrodomUpdateRemoveElement (Ordinal: 142, Address: 0x5d840)
RtlMicrodomUpdateSetNodeName (Ordinal: 143, Address: 0x5d920)
RtlMicrodomUpdateSetNodeTextContent (Ordinal: 144, Address: 0x5da80)
RtlMurmurHashLBlob (Ordinal: 145, Address: 0x78700)
RtlNsDestroy (Ordinal: 146, Address: 0x60790)
RtlNsInitialize (Ordinal: 147, Address: 0x60a40)
RtlPreInitializeSmartLBlobUcsWritingContext (Ordinal: 148, Address: 0x1209f0)
RtlPreInitializeSmartLBlobWritingContext (Ordinal: 149, Address: 0x1199d0)
RtlReallocateLBlob (Ordinal: 150, Address: 0x6fb30)
RtlReallocateLUnicodeString (Ordinal: 151, Address: 0x73630)
RtlReallocateLUtf8String (Ordinal: 152, Address: 0x75520)
RtlReallocateUnicodeString (Ordinal: 153, Address: 0x73780)
RtlRegisterErrorOriginationCallback (Ordinal: 154, Address: 0x78710)
RtlReportErrorOrigination (Ordinal: 155, Address: 0x78720)
RtlReportErrorPropagation (Ordinal: 156, Address: 0x787e0)
RtlSmartMultiUcsEncoder_Utf16LE (Ordinal: 157, Address: 0x75e90)
RtlSmartMultiUcsEncoder_Utf8 (Ordinal: 158, Address: 0x75ea0)
RtlSmartUcsEncoder_Utf16LE (Ordinal: 159, Address: 0x75eb0)
RtlSmartUcsEncoder_Utf8 (Ordinal: 160, Address: 0x75ef0)
RtlSplitEncodedLBlob (Ordinal: 161, Address: 0x6fcd0)
RtlSplitLUnicodeString (Ordinal: 162, Address: 0x739b0)
RtlSplitLUtf8String (Ordinal: 163, Address: 0x75640)
RtlSplitWin32RegistryPathIntoRootAndLeaves (Ordinal: 164, Address: 0x77300)
RtlTranscodeLBlobs (Ordinal: 165, Address: 0x70230)
RtlUpcaseUCSCharacter (Ordinal: 166, Address: 0x123a70)
RtlWriteDataIntoSmartLBlobWritingContext (Ordinal: 167, Address: 0x70a10)
RtlWriteDecodedUcsDataIntoSmartLBlobUcsWritingContext (Ordinal: 168, Address: 0x75f30)
RtlWriteMicrodomXml (Ordinal: 169, Address: 0x4e300)
RtlXmlDefaultCompareStrings (Ordinal: 170, Address: 0x63690)
RtlXmlDestroyNextLogicalThing (Ordinal: 171, Address: 0x65930)
RtlXmlDetermineStreamEncoding (Ordinal: 172, Address: 0x63750)
RtlXmlExtentToString (Ordinal: 173, Address: 0x65940)
RtlXmlInitializeNextLogicalThing (Ordinal: 174, Address: 0x65df0)
RtlXmlInitializeTokenization (Ordinal: 175, Address: 0x63980)
RtlXmlNextLogicalThing (Ordinal: 176, Address: 0x65eb0)
RtlXmlNextToken (Ordinal: 177, Address: 0x63a60)
SczAlloc (Ordinal: 178, Address: 0x49140)
SczAllocConcat2Sz (Ordinal: 179, Address: 0x49320)
SczAllocConcatSz (Ordinal: 180, Address: 0x49500)
SczAllocFormatted (Ordinal: 181, Address: 0x49680)
SczAllocFromAnsiSz (Ordinal: 182, Address: 0x49960)
SczAllocFromSz (Ordinal: 183, Address: 0x49ac0)
SczAllocPrefixSz (Ordinal: 184, Address: 0x49cb0)
SczEnsureBackslashTerminated (Ordinal: 185, Address: 0x49e70)
SczFree (Ordinal: 186, Address: 0x49f20)
SfpCreateOfflineRepairObject (Ordinal: 187, Address: 0x83950)
SfpUnload (Ordinal: 188, Address: 0x83bc0)
StringsAreEqualCaseInsensitive (Ordinal: 189, Address: 0xee6a0)
SzEnsureBackslashTerminated (Ordinal: 190, Address: 0x49fc0)
UninstallWindows (Ordinal: 191, Address: 0x8d3e0)

Imported DLLs & Functions

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x180154438)
AcquireSRWLockShared (Address: 0x180154430)
CloseHandle (Address: 0x180154428)
CloseThreadpoolTimer (Address: 0x180154420)
CompareFileTime (Address: 0x180154418)
CompareStringOrdinal (Address: 0x180154410)
CopyFileExW (Address: 0x180154408)
CopyFileW (Address: 0x180154400)
CreateDirectoryW (Address: 0x1801543f8)
CreateEventW (Address: 0x1801543f0)
CreateFileW (Address: 0x1801543e8)
CreateHardLinkW (Address: 0x1801543e0)
CreateMutexExW (Address: 0x1801543d8)
CreateSemaphoreExW (Address: 0x1801543d0)
CreateThreadpoolTimer (Address: 0x1801543c8)
DebugBreak (Address: 0x1801543c0)
DelayLoadFailureHook (Address: 0x1801543b8)
DeleteCriticalSection (Address: 0x1801543b0)
DeleteFileW (Address: 0x1801543a8)
DeviceIoControl (Address: 0x1801543a0)
EncodePointer (Address: 0x180154398)
EnterCriticalSection (Address: 0x180154390)
EnumResourceLanguagesExW (Address: 0x180154388)
ExitProcess (Address: 0x180154380)
ExpandEnvironmentStringsW (Address: 0x180154378)
FindClose (Address: 0x180154370)
FindFirstFileExW (Address: 0x180154368)
FindFirstFileW (Address: 0x180154360)
FindNextFileW (Address: 0x180154358)
FindResourceExW (Address: 0x180154350)
FlsAlloc (Address: 0x180154348)
FlsFree (Address: 0x180154340)
FlsGetValue (Address: 0x180154338)
FlsSetValue (Address: 0x180154330)
FlushFileBuffers (Address: 0x180154328)
FormatMessageW (Address: 0x180154320)
FreeEnvironmentStringsW (Address: 0x180154318)
FreeLibrary (Address: 0x180154310)
GetACP (Address: 0x180154308)
GetCommandLineA (Address: 0x180154300)
GetCommandLineW (Address: 0x1801542f8)
GetCompressedFileSizeW (Address: 0x1801542f0)
GetConsoleMode (Address: 0x1801542e8)
GetConsoleOutputCP (Address: 0x1801542e0)
GetCPInfo (Address: 0x1801542d8)
GetCurrentProcess (Address: 0x1801542d0)
GetCurrentProcessId (Address: 0x1801542c8)
GetCurrentThreadId (Address: 0x1801542c0)
GetDiskFreeSpaceW (Address: 0x1801542b8)
GetEnvironmentStringsW (Address: 0x1801542b0)
GetEnvironmentVariableW (Address: 0x1801542a8)
GetErrorMode (Address: 0x1801542a0)
GetFileAttributesExW (Address: 0x180154298)
GetFileAttributesW (Address: 0x180154290)
GetFileSizeEx (Address: 0x180154288)
GetFileType (Address: 0x180154280)
GetLastError (Address: 0x180154278)
GetLocalTime (Address: 0x180154270)
GetModuleFileNameA (Address: 0x180154268)
GetModuleFileNameW (Address: 0x180154260)
GetModuleHandleExW (Address: 0x180154258)
GetModuleHandleW (Address: 0x180154250)
GetOEMCP (Address: 0x180154248)
GetProcAddress (Address: 0x180154240)
GetProcessHeap (Address: 0x180154238)
GetStartupInfoW (Address: 0x180154230)
GetStdHandle (Address: 0x180154228)
GetStringTypeW (Address: 0x180154220)
GetSystemTime (Address: 0x180154218)
GetSystemTimeAsFileTime (Address: 0x180154210)
GetSystemWindowsDirectoryW (Address: 0x180154208)
GetTempPathW (Address: 0x180154200)
GetWindowsDirectoryW (Address: 0x1801541f8)
HeapAlloc (Address: 0x1801541f0)
HeapFree (Address: 0x1801541e8)
HeapReAlloc (Address: 0x1801541e0)
HeapSize (Address: 0x1801541d8)
InitializeCriticalSectionAndSpinCount (Address: 0x1801541d0)
InitializeCriticalSectionEx (Address: 0x1801541c8)
InitializeSListHead (Address: 0x1801541c0)
InitOnceBeginInitialize (Address: 0x1801541b8)
InitOnceComplete (Address: 0x1801541b0)
InterlockedFlushSList (Address: 0x1801541a8)
IsDebuggerPresent (Address: 0x1801541a0)
IsValidCodePage (Address: 0x180154198)
LCMapStringW (Address: 0x180154190)
LeaveCriticalSection (Address: 0x180154188)
LoadLibraryExA (Address: 0x180154180)
LoadLibraryExW (Address: 0x180154178)
LoadLibraryW (Address: 0x180154170)
LoadResource (Address: 0x180154168)
LocalAlloc (Address: 0x180154160)
LocalFree (Address: 0x180154158)
LockResource (Address: 0x180154150)
lstrcmpiW (Address: 0x180154148)
lstrcmpW (Address: 0x180154140)
MoveFileExW (Address: 0x180154138)
MultiByteToWideChar (Address: 0x180154130)
OpenSemaphoreW (Address: 0x180154128)
OutputDebugStringA (Address: 0x180154120)
OutputDebugStringW (Address: 0x180154118)
PrivCopyFileExW (Address: 0x180154110)
QueryPerformanceCounter (Address: 0x180154108)
RaiseException (Address: 0x180154100)
ReadConsoleW (Address: 0x1801540f8)
ReadFile (Address: 0x1801540f0)
ReleaseMutex (Address: 0x1801540e8)
ReleaseSemaphore (Address: 0x1801540e0)
ReleaseSRWLockExclusive (Address: 0x1801540d8)
ReleaseSRWLockShared (Address: 0x1801540d0)
RemoveDirectoryW (Address: 0x1801540c8)
ResetEvent (Address: 0x1801540c0)
RtlLookupFunctionEntry (Address: 0x1801540b8)
RtlPcToFileHeader (Address: 0x1801540b0)
RtlUnwindEx (Address: 0x1801540a8)
SetCurrentDirectoryW (Address: 0x1801540a0)
SetEndOfFile (Address: 0x180154098)
SetEnvironmentVariableW (Address: 0x180154090)
SetErrorMode (Address: 0x180154088)
SetEvent (Address: 0x180154080)
SetFilePointer (Address: 0x180154078)
SetFilePointerEx (Address: 0x180154070)
SetLastError (Address: 0x180154068)
SetStdHandle (Address: 0x180154060)
SetThreadpoolTimer (Address: 0x180154058)
SetUnhandledExceptionFilter (Address: 0x180154050)
SizeofResource (Address: 0x180154048)
Sleep (Address: 0x180154040)
TerminateProcess (Address: 0x180154038)
VirtualProtect (Address: 0x180154030)
WaitForSingleObject (Address: 0x180154028)
WaitForSingleObjectEx (Address: 0x180154020)
WaitForThreadpoolTimerCallbacks (Address: 0x180154018)
WideCharToMultiByte (Address: 0x180154010)
WriteConsoleW (Address: 0x180154008)
WriteFile (Address: 0x180154000)

ntdll.dll

DbgPrint (Address: 0x180154470)
DbgPrintEx (Address: 0x180154478)
LdrGetDllHandleEx (Address: 0x180154480)
LdrGetProcedureAddress (Address: 0x180154488)
LdrUnloadDll (Address: 0x180154490)
NtAdjustPrivilegesToken (Address: 0x180154498)
NtClose (Address: 0x1801544a0)
NtCreateFile (Address: 0x180154680)
NtDelayExecution (Address: 0x1801544a8)
NtDuplicateToken (Address: 0x1801544b0)
NtFlushKey (Address: 0x1801544b8)
NtFsControlFile (Address: 0x1801544c0)
NtLoadKey2 (Address: 0x1801544c8)
NtOpenFile (Address: 0x180154688)
NtOpenKey (Address: 0x1801544d0)
NtOpenKeyEx (Address: 0x1801544d8)
NtOpenProcessToken (Address: 0x1801544e0)
NtOpenThreadToken (Address: 0x1801544e8)
NtPrivilegeCheck (Address: 0x1801544f0)
NtQueryDirectoryFile (Address: 0x1801544f8)
NtQueryInformationFile (Address: 0x180154500)
NtQueryObject (Address: 0x180154508)
NtQueryPerformanceCounter (Address: 0x180154510)
NtQueryValueKey (Address: 0x180154518)
NtReadFile (Address: 0x180154690)
NtSetInformationThread (Address: 0x180154520)
NtUnloadKey2 (Address: 0x180154528)
NtWriteFile (Address: 0x180154530)
NtYieldExecution (Address: 0x180154538)
RtlAdjustPrivilege (Address: 0x180154540)
RtlAllocateAndInitializeSid (Address: 0x180154548)
RtlAllocateHeap (Address: 0x180154550)
RtlCopyMappedMemory (Address: 0x180154558)
RtlCopyUnicodeString (Address: 0x180154560)
RtlCreateSecurityDescriptor (Address: 0x180154568)
RtlCreateServiceSid (Address: 0x180154570)
RtlCreateUnicodeString (Address: 0x180154578)
RtlCreateUnicodeStringFromAsciiz (Address: 0x180154580)
RtlDeleteCriticalSection (Address: 0x180154588)
RtlDosPathNameToNtPathName_U (Address: 0x180154590)
RtlDowncaseUnicodeChar (Address: 0x180154598)
RtlEnterCriticalSection (Address: 0x1801545a0)
RtlEqualSid (Address: 0x1801545a8)
RtlFormatCurrentUserKeyPath (Address: 0x1801545b0)
RtlFreeHeap (Address: 0x1801545b8)
RtlFreeUnicodeString (Address: 0x1801545c0)
RtlGetControlSecurityDescriptor (Address: 0x1801545c8)
RtlHashUnicodeString (Address: 0x1801545d0)
RtlInitializeCriticalSection (Address: 0x1801545e0)
RtlInitUnicodeString (Address: 0x1801545d8)
RtlLeaveCriticalSection (Address: 0x1801545e8)
RtlLengthSecurityDescriptor (Address: 0x1801545f0)
RtlMakeSelfRelativeSD (Address: 0x1801545f8)
RtlMapGenericMask (Address: 0x180154600)
RtlNtStatusToDosError (Address: 0x180154608)
RtlNtStatusToDosErrorNoTeb (Address: 0x180154610)
RtlQueryEnvironmentVariable_U (Address: 0x180154618)
RtlRaiseStatus (Address: 0x180154620)
RtlReAllocateHeap (Address: 0x180154628)
RtlSetControlSecurityDescriptor (Address: 0x180154630)
RtlSetDaclSecurityDescriptor (Address: 0x180154638)
RtlSetGroupSecurityDescriptor (Address: 0x180154640)
RtlSetOwnerSecurityDescriptor (Address: 0x180154648)
RtlSetSaclSecurityDescriptor (Address: 0x180154650)
RtlTimeToTimeFields (Address: 0x180154658)
RtlUpcaseUnicodeChar (Address: 0x180154660)
ZwClose (Address: 0x180154668)
ZwCreateSection (Address: 0x180154698)
ZwMapViewOfSection (Address: 0x1801546a0)
ZwQueryInformationFile (Address: 0x180154670)
ZwUnmapViewOfSection (Address: 0x180154678)