ServicingCommon.dll

Description: Servicing Base DLL

Version: 10.0.26100.4654

Architecture: 64-bit

Operating System: Windows NT

SHA256: 22cfd1136aa65b65e0fedf019716892c

File Size: 906.3 KB

Uploaded At: Dec. 3, 2025, 2:38 a.m.

Views: 6

Exported Functions

CBSWdsLog (Ordinal: 1, Address: 0x45ce0)
CreateKeyformFromAttributesIntoBuffer (Ordinal: 2, Address: 0x7c820)
RecursiveCopy (Ordinal: 3, Address: 0x47960)
SetCustomLogging (Ordinal: 4, Address: 0x46630)
BeginFileMapEnumerationInternal (Ordinal: 5, Address: 0x850f0)
CbsCreateOfflineSession (Ordinal: 6, Address: 0x26030)
CbsCreateOfflineSessionFromStackInImage (Ordinal: 7, Address: 0x31bc0)
CbsFindServicingStackDirectory (Ordinal: 8, Address: 0x25610)
CbsGetSsBinaryPathFromTargetImage (Ordinal: 9, Address: 0x31be0)
CbsLoadSssFromTargetImage (Ordinal: 10, Address: 0x31c70)
CbsOfflineFinalize (Ordinal: 11, Address: 0x26050)
CbsOfflineFinalizeNoShutdownImageStack (Ordinal: 12, Address: 0x26070)
CbsOfflineSetLogFile (Ordinal: 13, Address: 0x26090)
CbsShutdownImageStack (Ordinal: 14, Address: 0x31c90)
CloseFileMapEnumerationInternal (Ordinal: 15, Address: 0x85460)
CompareObjectSDToSddl (Ordinal: 16, Address: 0x85910)
ConvertHResultToNtStatus (Ordinal: 17, Address: 0x78410)
ConvertNtStatusToHResult (Ordinal: 18, Address: 0x786a0)
DecompressManifest (Ordinal: 19, Address: 0x7d8e0)
EstimateReconstructWindowsDiskNeeds (Ordinal: 20, Address: 0x3bdc0)
EstimateReconstructWindowsRAMNeeds (Ordinal: 21, Address: 0x3c0f0)
FileVersionFromString (Ordinal: 22, Address: 0x492b0)
GetCWcpDll (Ordinal: 23, Address: 0x7bea0)
GetIdentityAuthority (Ordinal: 24, Address: 0x8ad90)
GetLoadedHiveKeyName (Ordinal: 25, Address: 0x793f0)
GetNextFileMapContentInternal (Ordinal: 26, Address: 0x854a0)
GetTemporaryPath (Ordinal: 27, Address: 0x79560)
GetUpdateReserveManagerLoader (Ordinal: 28, Address: 0x843a0)
IsKeyProtected (Ordinal: 29, Address: 0x86440)
IsLuaCdfFile (Ordinal: 30, Address: 0x854b0)
LoadUpdateReserveManager (Ordinal: 31, Address: 0x844b0)
ReconstructWindowsEx (Ordinal: 32, Address: 0x3c130)
ReconstructWindowsEx2 (Ordinal: 33, Address: 0x3c190)
RemoveFileProtection (Ordinal: 34, Address: 0x87390)
RemoveRegKeyProtection (Ordinal: 35, Address: 0x876f0)
RtlAllocateLBlob (Ordinal: 36, Address: 0x6cc80)
RtlAllocateLUnicodeString (Ordinal: 37, Address: 0x704e0)
RtlAllocateLUtf8String (Ordinal: 38, Address: 0x72f90)
RtlAllocateUnicodeString (Ordinal: 39, Address: 0x705d0)
RtlAppendLUnicodeStringToLUnicodeString (Ordinal: 40, Address: 0x706b0)
RtlAppendLUtf8StringToLUtf8String (Ordinal: 41, Address: 0x72fa0)
RtlAppendUcsCharacterToLUnicodeString (Ordinal: 42, Address: 0x709f0)
RtlAppendUcsCharacterToLUtf8String (Ordinal: 43, Address: 0x73130)
RtlAppendUcsCharactersToLUnicodeString (Ordinal: 44, Address: 0x70a40)
RtlBase64EncodeLBlobToLUnicodeString (Ordinal: 45, Address: 0x6cea0)
RtlBase64EncodeLBlobToLUtf8String (Ordinal: 46, Address: 0x6d0c0)
RtlCalculateUtf16StringLengthFromLUtf8String (Ordinal: 47, Address: 0x73270)
RtlCommitSmartLBlobUcsWritingContext (Ordinal: 48, Address: 0x45aa0)
RtlCommitSmartLBlobWritingContext (Ordinal: 49, Address: 0x45aa0)
RtlCompareEncodedLBlobs (Ordinal: 50, Address: 0x6d2e0)
RtlCompareLUnicodeStringToLUtf8String (Ordinal: 51, Address: 0x73430)
RtlCompareLUnicodeStrings (Ordinal: 52, Address: 0x70c00)
RtlCompareLUtf8StringToLUnicodeString (Ordinal: 53, Address: 0x73460)
RtlCompareLUtf8Strings (Ordinal: 54, Address: 0x73490)
RtlConcatenateLUnicodeStrings (Ordinal: 55, Address: 0x70c30)
RtlConcatenateLUtf8Strings (Ordinal: 56, Address: 0x734c0)
RtlConvertNtFilePathToWin32FilePath (Ordinal: 57, Address: 0x759d0)
RtlConvertNtRegistryPathToWin32RegistryPath (Ordinal: 58, Address: 0x75df0)
RtlConvertWin32FilePathToNtFilePath (Ordinal: 59, Address: 0x75eb0)
RtlConvertWin32RegistryPathToNtRegistryPath (Ordinal: 60, Address: 0x761b0)
RtlCopyLUnicodeString (Ordinal: 61, Address: 0x70e90)
RtlCopyLUtf8String (Ordinal: 62, Address: 0x73720)
RtlCopyLUtf8StringToLUnicodeString (Ordinal: 63, Address: 0x73850)
RtlCreateDefaultMicrodomXmlWriter (Ordinal: 64, Address: 0x4e200)
RtlCreateDefaultXmlWriter (Ordinal: 65, Address: 0x4f8f0)
RtlCreateFilteringMicrodomWriter (Ordinal: 66, Address: 0x506f0)
RtlCreateMicrodom (Ordinal: 67, Address: 0x57880)
RtlCreateMicrodomUpdateContext (Ordinal: 68, Address: 0x5b550)
RtlCreateUpdatedMicrodomAsMicrodom (Ordinal: 69, Address: 0x5b690)
RtlCreateUpdatedMicrodomAsUtf8 (Ordinal: 70, Address: 0x5b7d0)
RtlCreateUtf16LEUCSStringBuilder (Ordinal: 71, Address: 0x76dc0)
RtlCreateUtf8UCSStringBuilder (Ordinal: 72, Address: 0x76f50)
RtlDeallocateUnicodeString (Ordinal: 73, Address: 0x70fc0)
RtlDecodeBase64LUnicodeStringToLBlob (Ordinal: 74, Address: 0x6d790)
RtlDecodeBase64LUtf8StringToLBlob (Ordinal: 75, Address: 0x6d990)
RtlDecodeUtf16LE (Ordinal: 76, Address: 0x772d0)
RtlDecodeUtf8 (Ordinal: 77, Address: 0x77360)
RtlDestroyGrowingList (Ordinal: 78, Address: 0x5ca60)
RtlDestroyMicrodomUpdateContext (Ordinal: 79, Address: 0x5b910)
RtlDetermineFilteredLUnicodeStringLength (Ordinal: 80, Address: 0x70ff0)
RtlDetermineTranscodedLBlobSize (Ordinal: 81, Address: 0x6dbd0)
RtlDoesLUnicodeStringMatchExpression (Ordinal: 82, Address: 0x71180)
RtlDowncaseUCSCharacter (Ordinal: 83, Address: 0x77790)
RtlDuplicateLBlob (Ordinal: 84, Address: 0x6dfb0)
RtlDuplicateLUnicodeString (Ordinal: 85, Address: 0x717d0)
RtlDuplicateLUnicodeStringToLUtf8String (Ordinal: 86, Address: 0x73960)
RtlDuplicateLUnicodeStringToUnicodeString (Ordinal: 87, Address: 0x718b0)
RtlDuplicateLUtf8String (Ordinal: 88, Address: 0x73a40)
RtlDuplicateLUtf8StringToLUnicodeString (Ordinal: 89, Address: 0x73b20)
RtlDuplicateNullTerminatedStringToLUnicodeString (Ordinal: 90, Address: 0x71a50)
RtlDuplicateUnicodeStringToLUnicodeString (Ordinal: 91, Address: 0x71ae0)
RtlEncodeUtf16LE (Ordinal: 92, Address: 0x779f0)
RtlEncodeUtf8 (Ordinal: 93, Address: 0x77b70)
RtlEqualLUnicodeStringPrefix (Ordinal: 94, Address: 0x71bc0)
RtlEqualLUnicodeStrings (Ordinal: 95, Address: 0x71c00)
RtlEqualLUtf8StringPrefix (Ordinal: 96, Address: 0x73c00)
RtlEqualLUtf8Strings (Ordinal: 97, Address: 0x73d50)
RtlExecuteXPathOverMicrodom (Ordinal: 98, Address: 0x5ed60)
RtlFilterLUnicodeString (Ordinal: 99, Address: 0x71c80)
RtlFinalizeSmartLBlobUcsWritingContext (Ordinal: 100, Address: 0x25f50)
RtlFinalizeSmartLBlobWritingContext (Ordinal: 101, Address: 0x25f50)
RtlFreeLBlob (Ordinal: 102, Address: 0x6e130)
RtlFreeLUnicodeString (Ordinal: 103, Address: 0x6e130)
RtlFreeLUtf8String (Ordinal: 104, Address: 0x6e130)
RtlGetEncodingSizeUcs2 (Ordinal: 105, Address: 0x77ea0)
RtlGetEncodingSizeUtf16 (Ordinal: 106, Address: 0x77ed0)
RtlGetEncodingSizeUtf8 (Ordinal: 107, Address: 0x74ea0)
RtlGetHashAlgorithmHashLength (Ordinal: 108, Address: 0x6e160)
RtlHashLBlob (Ordinal: 109, Address: 0x6ea40)
RtlHashLUnicodeString (Ordinal: 110, Address: 0x71e10)
RtlHashLUtf8String (Ordinal: 111, Address: 0x73e00)
RtlIndexIntoGrowingList (Ordinal: 112, Address: 0x5caf0)
RtlInitLUnicodeStringFromNullTerminatedString (Ordinal: 113, Address: 0x71e30)
RtlInitLUnicodeStringFromUnicodeString (Ordinal: 114, Address: 0x71ed0)
RtlInitUnicodeStringFromLUnicodeString (Ordinal: 115, Address: 0x71f60)
RtlInitializeGrowingList (Ordinal: 116, Address: 0x5cbf0)
RtlInitializeSmartLBlobWritingContext (Ordinal: 117, Address: 0x6ed30)
RtlInitializeSmartLUnicodeStringWritingContext (Ordinal: 118, Address: 0x74d10)
RtlInitializeSmartLUtf8StringWritingContext (Ordinal: 119, Address: 0x74e50)
RtlIsLBlobValid (Ordinal: 120, Address: 0x6ef10)
RtlIsLUnicodeStringValid (Ordinal: 121, Address: 0x720e0)
RtlIsLUtf8StringValid (Ordinal: 122, Address: 0x73e20)
RtlLengthOfUcsCharacterEncodedAsUtf8 (Ordinal: 123, Address: 0x74ea0)
RtlMatchEncodedLBlobAgainstList (Ordinal: 124, Address: 0x6ef40)
RtlMatchEncodedLBlobAgainstPointerList (Ordinal: 125, Address: 0x6eff0)
RtlMatchLUnicodeStringAgainstLUtf8StringList (Ordinal: 126, Address: 0x72150)
RtlMatchLUnicodeStringAgainstLUtf8StringPointerList (Ordinal: 127, Address: 0x72350)
RtlMatchLUnicodeStringAgainstList (Ordinal: 128, Address: 0x72540)
RtlMatchLUnicodeStringAgainstPointerList (Ordinal: 129, Address: 0x72740)
RtlMatchLUtf8StringAgainstLUnicodeStringList (Ordinal: 130, Address: 0x73e50)
RtlMatchLUtf8StringAgainstLUnicodeStringPointerList (Ordinal: 131, Address: 0x74050)
RtlMatchLUtf8StringAgainstList (Ordinal: 132, Address: 0x74240)
RtlMatchLUtf8StringAgainstPointerList (Ordinal: 133, Address: 0x74440)
RtlMicrodomUpdateCreateAttributeNs (Ordinal: 134, Address: 0x5b9c0)
RtlMicrodomUpdateCreateElementNs (Ordinal: 135, Address: 0x5bb70)
RtlMicrodomUpdateCreateTextual (Ordinal: 136, Address: 0x5bdf0)
RtlMicrodomUpdateGetCookieForExistingAttribute (Ordinal: 137, Address: 0x5bf30)
RtlMicrodomUpdateGetCookieForExistingNode (Ordinal: 138, Address: 0x5bfc0)
RtlMicrodomUpdateInsertChild (Ordinal: 139, Address: 0x5c060)
RtlMicrodomUpdateInsertMicrodomNodeEx (Ordinal: 140, Address: 0x5c1d0)
RtlMicrodomUpdateRemoveChild (Ordinal: 141, Address: 0x5c4b0)
RtlMicrodomUpdateRemoveElement (Ordinal: 142, Address: 0x5c5c0)
RtlMicrodomUpdateSetNodeName (Ordinal: 143, Address: 0x5c670)
RtlMicrodomUpdateSetNodeTextContent (Ordinal: 144, Address: 0x5c7a0)
RtlMurmurHashLBlob (Ordinal: 145, Address: 0x78190)
RtlNsDestroy (Ordinal: 146, Address: 0x5f3a0)
RtlNsInitialize (Ordinal: 147, Address: 0x5f500)
RtlPreInitializeSmartLBlobUcsWritingContext (Ordinal: 148, Address: 0x74f00)
RtlPreInitializeSmartLBlobWritingContext (Ordinal: 149, Address: 0x6f0a0)
RtlReallocateLBlob (Ordinal: 150, Address: 0x6f0c0)
RtlReallocateLUnicodeString (Ordinal: 151, Address: 0x72930)
RtlReallocateLUtf8String (Ordinal: 152, Address: 0x74630)
RtlReallocateUnicodeString (Ordinal: 153, Address: 0x72a50)
RtlRegisterErrorOriginationCallback (Ordinal: 154, Address: 0x781b0)
RtlReportErrorOrigination (Ordinal: 155, Address: 0x781c0)
RtlReportErrorPropagation (Ordinal: 156, Address: 0x78260)
RtlSmartMultiUcsEncoder_Utf16LE (Ordinal: 157, Address: 0x74f30)
RtlSmartMultiUcsEncoder_Utf8 (Ordinal: 158, Address: 0x74f40)
RtlSmartUcsEncoder_Utf16LE (Ordinal: 159, Address: 0x74f50)
RtlSmartUcsEncoder_Utf8 (Ordinal: 160, Address: 0x74fa0)
RtlSplitEncodedLBlob (Ordinal: 161, Address: 0x6f250)
RtlSplitLUnicodeString (Ordinal: 162, Address: 0x72c50)
RtlSplitLUtf8String (Ordinal: 163, Address: 0x74720)
RtlSplitWin32RegistryPathIntoRootAndLeaves (Ordinal: 164, Address: 0x76310)
RtlTranscodeLBlobs (Ordinal: 165, Address: 0x6f7e0)
RtlUpcaseUCSCharacter (Ordinal: 166, Address: 0x777d0)
RtlWriteDataIntoSmartLBlobWritingContext (Ordinal: 167, Address: 0x6feb0)
RtlWriteDecodedUcsDataIntoSmartLBlobUcsWritingContext (Ordinal: 168, Address: 0x74ff0)
RtlWriteMicrodomXml (Ordinal: 169, Address: 0x4e420)
RtlXmlDefaultCompareStrings (Ordinal: 170, Address: 0x62210)
RtlXmlDestroyNextLogicalThing (Ordinal: 171, Address: 0x64830)
RtlXmlDetermineStreamEncoding (Ordinal: 172, Address: 0x62470)
RtlXmlExtentToString (Ordinal: 173, Address: 0x64850)
RtlXmlInitializeNextLogicalThing (Ordinal: 174, Address: 0x64d10)
RtlXmlInitializeTokenization (Ordinal: 175, Address: 0x62740)
RtlXmlNextLogicalThing (Ordinal: 176, Address: 0x64e60)
RtlXmlNextToken (Ordinal: 177, Address: 0x62820)
SczAlloc (Ordinal: 178, Address: 0x49850)
SczAllocConcat2Sz (Ordinal: 179, Address: 0x499f0)
SczAllocConcatSz (Ordinal: 180, Address: 0x49ba0)
SczAllocFormatted (Ordinal: 181, Address: 0x49d00)
SczAllocFromAnsiSz (Ordinal: 182, Address: 0x49fa0)
SczAllocFromSz (Ordinal: 183, Address: 0x4a100)
SczAllocPrefixSz (Ordinal: 184, Address: 0x4a2c0)
SczEnsureBackslashTerminated (Ordinal: 185, Address: 0x4a440)
SczFree (Ordinal: 186, Address: 0x4a4c0)
SfpCreateOfflineRepairObject (Ordinal: 187, Address: 0x83730)
SfpUnload (Ordinal: 188, Address: 0x839e0)
StringsAreEqualCaseInsensitive (Ordinal: 189, Address: 0x4a540)
SzEnsureBackslashTerminated (Ordinal: 190, Address: 0x4a580)
UninstallWindows (Ordinal: 191, Address: 0x8d010)

Imported DLLs & Functions

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1800a6488)
AcquireSRWLockShared (Address: 0x1800a6498)
CloseHandle (Address: 0x1800a64b0)
CloseThreadpoolTimer (Address: 0x1800a64d8)
CompareFileTime (Address: 0x1800a6608)
CompareStringOrdinal (Address: 0x1800a6668)
CopyFileExW (Address: 0x1800a65a0)
CopyFileW (Address: 0x1800a6528)
CreateDirectoryW (Address: 0x1800a6520)
CreateEventW (Address: 0x1800a67d8)
CreateFileW (Address: 0x1800a65a8)
CreateHardLinkW (Address: 0x1800a65d8)
CreateMutexExW (Address: 0x1800a6560)
CreateSemaphoreExW (Address: 0x1800a6568)
CreateThreadpoolTimer (Address: 0x1800a6510)
DebugBreak (Address: 0x1800a6470)
DelayLoadFailureHook (Address: 0x1800a6830)
DeleteCriticalSection (Address: 0x1800a64f8)
DeleteFileW (Address: 0x1800a6548)
DeviceIoControl (Address: 0x1800a6640)
EncodePointer (Address: 0x1800a6810)
EnterCriticalSection (Address: 0x1800a64e8)
EnumResourceLanguagesExW (Address: 0x1800a6858)
ExitProcess (Address: 0x1800a66f8)
ExpandEnvironmentStringsW (Address: 0x1800a6868)
FindClose (Address: 0x1800a65e0)
FindFirstFileExW (Address: 0x1800a65c8)
FindFirstFileW (Address: 0x1800a6610)
FindNextFileW (Address: 0x1800a65d0)
FindResourceExW (Address: 0x1800a6848)
FlsAlloc (Address: 0x1800a6728)
FlsFree (Address: 0x1800a6740)
FlsGetValue (Address: 0x1800a6730)
FlsSetValue (Address: 0x1800a6738)
FlushFileBuffers (Address: 0x1800a6660)
FormatMessageW (Address: 0x1800a6438)
FreeEnvironmentStringsW (Address: 0x1800a6670)
FreeLibrary (Address: 0x1800a6430)
GetACP (Address: 0x1800a6710)
GetCommandLineA (Address: 0x1800a6828)
GetCommandLineW (Address: 0x1800a6820)
GetCompressedFileSizeW (Address: 0x1800a6580)
GetConsoleMode (Address: 0x1800a6788)
GetConsoleOutputCP (Address: 0x1800a6780)
GetCPInfo (Address: 0x1800a6720)
GetCurrentProcess (Address: 0x1800a65b0)
GetCurrentProcessId (Address: 0x1800a6558)
GetCurrentThreadId (Address: 0x1800a6440)
GetDiskFreeSpaceW (Address: 0x1800a6578)
GetEnvironmentStringsW (Address: 0x1800a6818)
GetEnvironmentVariableW (Address: 0x1800a6620)
GetErrorMode (Address: 0x1800a6530)
GetFileAttributesExW (Address: 0x1800a6650)
GetFileAttributesW (Address: 0x1800a6518)
GetFileSizeEx (Address: 0x1800a65f8)
GetFileType (Address: 0x1800a6760)
GetLastError (Address: 0x1800a6658)
GetLocalTime (Address: 0x1800a66c0)
GetModuleFileNameA (Address: 0x1800a6468)
GetModuleFileNameW (Address: 0x1800a6678)
GetModuleHandleExW (Address: 0x1800a6410)
GetModuleHandleW (Address: 0x1800a6458)
GetOEMCP (Address: 0x1800a6718)
GetProcAddress (Address: 0x1800a6420)
GetProcessHeap (Address: 0x1800a6448)
GetStartupInfoW (Address: 0x1800a6768)
GetStdHandle (Address: 0x1800a6758)
GetStringTypeW (Address: 0x1800a6700)
GetSystemTime (Address: 0x1800a6630)
GetSystemTimeAsFileTime (Address: 0x1800a65c0)
GetSystemWindowsDirectoryW (Address: 0x1800a6540)
GetTempPathW (Address: 0x1800a6698)
GetWindowsDirectoryW (Address: 0x1800a66a0)
HeapAlloc (Address: 0x1800a6450)
HeapFree (Address: 0x1800a6460)
HeapReAlloc (Address: 0x1800a67b8)
HeapSize (Address: 0x1800a67b0)
InitializeCriticalSectionAndSpinCount (Address: 0x1800a67c0)
InitializeCriticalSectionEx (Address: 0x1800a64f0)
InitializeSListHead (Address: 0x1800a67e8)
InitOnceBeginInitialize (Address: 0x1800a6688)
InitOnceComplete (Address: 0x1800a6690)
InterlockedFlushSList (Address: 0x1800a67f8)
IsDebuggerPresent (Address: 0x1800a6478)
IsProcessorFeaturePresent (Address: 0x1800a66f0)
IsValidCodePage (Address: 0x1800a6708)
LCMapStringW (Address: 0x1800a6750)
LeaveCriticalSection (Address: 0x1800a6570)
LoadLibraryExA (Address: 0x1800a6838)
LoadLibraryExW (Address: 0x1800a6418)
LoadLibraryW (Address: 0x1800a6628)
LoadResource (Address: 0x1800a6840)
LocalAlloc (Address: 0x1800a6588)
LocalFree (Address: 0x1800a6590)
LockResource (Address: 0x1800a6850)
lstrcmpiW (Address: 0x1800a66a8)
lstrcmpW (Address: 0x1800a66b8)
MoveFileExW (Address: 0x1800a6598)
MultiByteToWideChar (Address: 0x1800a6600)
OpenSemaphoreW (Address: 0x1800a6508)
OutputDebugStringA (Address: 0x1800a6618)
OutputDebugStringW (Address: 0x1800a6480)
PrivCopyFileExW (Address: 0x1800a6638)
QueryPerformanceCounter (Address: 0x1800a67e0)
RaiseException (Address: 0x1800a6808)
ReadConsoleW (Address: 0x1800a6798)
ReadFile (Address: 0x1800a65f0)
ReleaseMutex (Address: 0x1800a64c0)
ReleaseSemaphore (Address: 0x1800a64b8)
ReleaseSRWLockExclusive (Address: 0x1800a6490)
ReleaseSRWLockShared (Address: 0x1800a64a0)
RemoveDirectoryW (Address: 0x1800a6550)
ResetEvent (Address: 0x1800a67d0)
RtlCaptureContext (Address: 0x1800a66c8)
RtlLookupFunctionEntry (Address: 0x1800a66d0)
RtlPcToFileHeader (Address: 0x1800a6800)
RtlUnwindEx (Address: 0x1800a67f0)
RtlVirtualUnwind (Address: 0x1800a66d8)
SetCurrentDirectoryW (Address: 0x1800a66b0)
SetEndOfFile (Address: 0x1800a6790)
SetEnvironmentVariableW (Address: 0x1800a6428)
SetErrorMode (Address: 0x1800a6538)
SetEvent (Address: 0x1800a67c8)
SetFilePointer (Address: 0x1800a6648)
SetFilePointerEx (Address: 0x1800a67a0)
SetLastError (Address: 0x1800a64a8)
SetStdHandle (Address: 0x1800a6770)
SetThreadpoolTimer (Address: 0x1800a64c8)
SetUnhandledExceptionFilter (Address: 0x1800a66e8)
SizeofResource (Address: 0x1800a6860)
Sleep (Address: 0x1800a65b8)
TerminateProcess (Address: 0x1800a6680)
UnhandledExceptionFilter (Address: 0x1800a66e0)
VirtualProtect (Address: 0x1800a6748)
WaitForSingleObject (Address: 0x1800a6500)
WaitForSingleObjectEx (Address: 0x1800a64e0)
WaitForThreadpoolTimerCallbacks (Address: 0x1800a64d0)
WideCharToMultiByte (Address: 0x1800a65e8)
WriteConsoleW (Address: 0x1800a67a8)
WriteFile (Address: 0x1800a6778)

ntdll.dll

DbgPrint (Address: 0x1800a6998)
DbgPrintEx (Address: 0x1800a68d0)
LdrGetDllHandleEx (Address: 0x1800a6990)
LdrGetProcedureAddress (Address: 0x1800a6970)
LdrUnloadDll (Address: 0x1800a6988)
NtAdjustPrivilegesToken (Address: 0x1800a68f0)
NtClose (Address: 0x1800a6a38)
NtCreateFile (Address: 0x1800a6a80)
NtDelayExecution (Address: 0x1800a68e8)
NtDuplicateToken (Address: 0x1800a6928)
NtFlushKey (Address: 0x1800a6a50)
NtFsControlFile (Address: 0x1800a6878)
NtLoadKey2 (Address: 0x1800a6940)
NtOpenFile (Address: 0x1800a69f8)
NtOpenKey (Address: 0x1800a6980)
NtOpenKeyEx (Address: 0x1800a6a78)
NtOpenProcessToken (Address: 0x1800a6908)
NtOpenThreadToken (Address: 0x1800a6948)
NtPrivilegeCheck (Address: 0x1800a6950)
NtQueryDirectoryFile (Address: 0x1800a69e8)
NtQueryInformationFile (Address: 0x1800a6890)
NtQueryObject (Address: 0x1800a68a0)
NtQueryPerformanceCounter (Address: 0x1800a6880)
NtQueryValueKey (Address: 0x1800a69a0)
NtReadFile (Address: 0x1800a69c8)
NtSetInformationThread (Address: 0x1800a68a8)
NtUnloadKey2 (Address: 0x1800a6a40)
NtWriteFile (Address: 0x1800a6978)
NtYieldExecution (Address: 0x1800a68b0)
RtlAdjustPrivilege (Address: 0x1800a6a28)
RtlAllocateAndInitializeSid (Address: 0x1800a6938)
RtlAllocateHeap (Address: 0x1800a6a70)
RtlCopyMappedMemory (Address: 0x1800a69d8)
RtlCopyUnicodeString (Address: 0x1800a6a98)
RtlCreateSecurityDescriptor (Address: 0x1800a6960)
RtlCreateServiceSid (Address: 0x1800a6a08)
RtlCreateUnicodeString (Address: 0x1800a6a20)
RtlCreateUnicodeStringFromAsciiz (Address: 0x1800a69a8)
RtlDeleteCriticalSection (Address: 0x1800a6a58)
RtlDosPathNameToNtPathName_U (Address: 0x1800a6888)
RtlDowncaseUnicodeChar (Address: 0x1800a68c8)
RtlEnterCriticalSection (Address: 0x1800a6a30)
RtlEqualSid (Address: 0x1800a6a10)
RtlFormatCurrentUserKeyPath (Address: 0x1800a68b8)
RtlFreeHeap (Address: 0x1800a6a60)
RtlFreeUnicodeString (Address: 0x1800a69c0)
RtlGetControlSecurityDescriptor (Address: 0x1800a6918)
RtlHashUnicodeString (Address: 0x1800a6a90)
RtlInitializeCriticalSection (Address: 0x1800a6aa8)
RtlInitUnicodeString (Address: 0x1800a6898)
RtlLeaveCriticalSection (Address: 0x1800a6a88)
RtlLengthSecurityDescriptor (Address: 0x1800a6900)
RtlMakeSelfRelativeSD (Address: 0x1800a6920)
RtlMapGenericMask (Address: 0x1800a6a00)
RtlNtStatusToDosError (Address: 0x1800a6a18)
RtlNtStatusToDosErrorNoTeb (Address: 0x1800a68e0)
RtlQueryEnvironmentVariable_U (Address: 0x1800a6a48)
RtlRaiseStatus (Address: 0x1800a6a68)
RtlReAllocateHeap (Address: 0x1800a68d8)
RtlSetControlSecurityDescriptor (Address: 0x1800a6aa0)
RtlSetDaclSecurityDescriptor (Address: 0x1800a6930)
RtlSetGroupSecurityDescriptor (Address: 0x1800a6958)
RtlSetOwnerSecurityDescriptor (Address: 0x1800a6910)
RtlSetSaclSecurityDescriptor (Address: 0x1800a68f8)
RtlTimeToTimeFields (Address: 0x1800a6968)
RtlUpcaseUnicodeChar (Address: 0x1800a68c0)
ZwClose (Address: 0x1800a69f0)
ZwCreateSection (Address: 0x1800a69b8)
ZwMapViewOfSection (Address: 0x1800a69d0)
ZwQueryInformationFile (Address: 0x1800a69e0)
ZwUnmapViewOfSection (Address: 0x1800a69b0)