ServicingCommon.dll

Description: Servicing Base DLL

Version: 10.0.26100.4654

Architecture: 32-bit

Operating System: Windows NT

SHA256: b14de760e42df30a3cea2dbc61c6f239

File Size: 727.9 KB

Uploaded At: Dec. 3, 2025, 2:38 a.m.

Views: 7

Exported Functions

CBSWdsLog (Ordinal: 1, Address: 0x3db30)
CreateKeyformFromAttributesIntoBuffer (Ordinal: 2, Address: 0x67ad0)
RecursiveCopy (Ordinal: 3, Address: 0x3e730)
SetCustomLogging (Ordinal: 4, Address: 0x3c4e0)
CloseFileMapEnumerationInternal (Ordinal: 5, Address: 0x6f3a0)
RtlAppendLUnicodeStringToLUnicodeString (Ordinal: 6, Address: 0x5c090)
RtlAppendLUtf8StringToLUtf8String (Ordinal: 7, Address: 0x5de50)
RtlCommitSmartLBlobUcsWritingContext (Ordinal: 8, Address: 0x47630)
RtlCommitSmartLBlobWritingContext (Ordinal: 9, Address: 0x47630)
RtlConvertNtFilePathToWin32FilePath (Ordinal: 10, Address: 0x62c00)
RtlConvertNtRegistryPathToWin32RegistryPath (Ordinal: 11, Address: 0x62b70)
RtlConvertWin32FilePathToNtFilePath (Ordinal: 12, Address: 0x62920)
RtlConvertWin32RegistryPathToNtRegistryPath (Ordinal: 13, Address: 0x62770)
RtlCopyLUnicodeString (Ordinal: 14, Address: 0x5b720)
RtlCopyLUtf8String (Ordinal: 15, Address: 0x5d740)
RtlCopyLUtf8StringToLUnicodeString (Ordinal: 16, Address: 0x5d8a0)
RtlCreateMicrodomUpdateContext (Ordinal: 17, Address: 0x42e40)
RtlCreateUpdatedMicrodomAsMicrodom (Ordinal: 18, Address: 0x44190)
RtlCreateUpdatedMicrodomAsUtf8 (Ordinal: 19, Address: 0x44080)
RtlDeallocateUnicodeString (Ordinal: 20, Address: 0x5b660)
RtlDecodeUtf16LE (Ordinal: 21, Address: 0x63680)
RtlDecodeUtf8 (Ordinal: 22, Address: 0x63410)
RtlDestroyMicrodomUpdateContext (Ordinal: 23, Address: 0x42f20)
RtlDowncaseUCSCharacter (Ordinal: 24, Address: 0x63880)
RtlDuplicateLBlob (Ordinal: 25, Address: 0x5f2b0)
RtlDuplicateLUnicodeString (Ordinal: 26, Address: 0x5b7e0)
RtlDuplicateLUnicodeStringToLUtf8String (Ordinal: 27, Address: 0x5d9f0)
RtlDuplicateLUtf8String (Ordinal: 28, Address: 0x5d800)
RtlDuplicateLUtf8StringToLUnicodeString (Ordinal: 29, Address: 0x5d950)
RtlDuplicateNullTerminatedStringToLUnicodeString (Ordinal: 30, Address: 0x5bbb0)
RtlDuplicateUnicodeStringToLUnicodeString (Ordinal: 31, Address: 0x5b880)
RtlEncodeUtf16LE (Ordinal: 32, Address: 0x63ba0)
RtlEncodeUtf8 (Ordinal: 33, Address: 0x63a20)
RtlFinalizeSmartLBlobUcsWritingContext (Ordinal: 34, Address: 0x23f30)
RtlFinalizeSmartLBlobWritingContext (Ordinal: 35, Address: 0x23f30)
RtlFreeLBlob (Ordinal: 36, Address: 0x610e0)
RtlFreeLUnicodeString (Ordinal: 37, Address: 0x5b710)
RtlFreeLUtf8String (Ordinal: 38, Address: 0x5b710)
RtlGetEncodingSizeUcs2 (Ordinal: 39, Address: 0x63ec0)
RtlGetEncodingSizeUtf16 (Ordinal: 40, Address: 0x63e80)
RtlGetEncodingSizeUtf8 (Ordinal: 41, Address: 0x5edb0)
RtlHashLUnicodeString (Ordinal: 42, Address: 0x5d700)
RtlHashLUtf8String (Ordinal: 43, Address: 0x5d720)
RtlInitLUnicodeStringFromNullTerminatedString (Ordinal: 44, Address: 0x5bb20)
RtlInitLUnicodeStringFromUnicodeString (Ordinal: 45, Address: 0x5b9e0)
RtlInitUnicodeStringFromLUnicodeString (Ordinal: 46, Address: 0x5ba50)
RtlIsLBlobValid (Ordinal: 47, Address: 0x61040)
RtlIsLUnicodeStringValid (Ordinal: 48, Address: 0x5d6d0)
RtlIsLUtf8StringValid (Ordinal: 49, Address: 0x5e790)
RtlLengthOfUcsCharacterEncodedAsUtf8 (Ordinal: 50, Address: 0x5edb0)
RtlMicrodomUpdateCreateAttributeNs (Ordinal: 51, Address: 0x43290)
RtlMicrodomUpdateCreateElementNs (Ordinal: 52, Address: 0x42fa0)
RtlMicrodomUpdateCreateTextual (Ordinal: 53, Address: 0x431a0)
RtlMicrodomUpdateGetCookieForExistingAttribute (Ordinal: 54, Address: 0x43480)
RtlMicrodomUpdateGetCookieForExistingNode (Ordinal: 55, Address: 0x433f0)
RtlMicrodomUpdateInsertChild (Ordinal: 56, Address: 0x43720)
RtlMicrodomUpdateInsertMicrodomNodeEx (Ordinal: 57, Address: 0x43e30)
RtlMicrodomUpdateRemoveChild (Ordinal: 58, Address: 0x43830)
RtlMicrodomUpdateRemoveElement (Ordinal: 59, Address: 0x438f0)
RtlMicrodomUpdateSetNodeName (Ordinal: 60, Address: 0x43620)
RtlMicrodomUpdateSetNodeTextContent (Ordinal: 61, Address: 0x43520)
RtlPreInitializeSmartLBlobUcsWritingContext (Ordinal: 62, Address: 0x5e930)
RtlPreInitializeSmartLBlobWritingContext (Ordinal: 63, Address: 0x60bc0)
RtlSmartMultiUcsEncoder_Utf16LE (Ordinal: 64, Address: 0x5ed90)
RtlSmartMultiUcsEncoder_Utf8 (Ordinal: 65, Address: 0x5ed30)
RtlSmartUcsEncoder_Utf16LE (Ordinal: 66, Address: 0x5ed50)
RtlSmartUcsEncoder_Utf8 (Ordinal: 67, Address: 0x5ecf0)
RtlSplitWin32RegistryPathIntoRootAndLeaves (Ordinal: 68, Address: 0x62790)
RtlUpcaseUCSCharacter (Ordinal: 69, Address: 0x638c0)
RtlWriteDataIntoSmartLBlobWritingContext (Ordinal: 70, Address: 0x60db0)
BeginFileMapEnumerationInternal (Ordinal: 71, Address: 0x6f140)
CbsCreateOfflineSession (Ordinal: 72, Address: 0x23f60)
CbsCreateOfflineSessionFromStackInImage (Ordinal: 73, Address: 0x29480)
CbsFindServicingStackDirectory (Ordinal: 74, Address: 0x23c70)
CbsGetSsBinaryPathFromTargetImage (Ordinal: 75, Address: 0x294d0)
CbsLoadSssFromTargetImage (Ordinal: 76, Address: 0x294a0)
CbsOfflineFinalize (Ordinal: 77, Address: 0x23f80)
CbsOfflineFinalizeNoShutdownImageStack (Ordinal: 78, Address: 0x23f90)
CbsOfflineSetLogFile (Ordinal: 79, Address: 0x243a0)
CbsShutdownImageStack (Ordinal: 80, Address: 0x29470)
CompareObjectSDToSddl (Ordinal: 81, Address: 0x6fa80)
ConvertHResultToNtStatus (Ordinal: 82, Address: 0x64ef0)
ConvertNtStatusToHResult (Ordinal: 83, Address: 0x64ad0)
DecompressManifest (Ordinal: 84, Address: 0x68e00)
EstimateReconstructWindowsDiskNeeds (Ordinal: 85, Address: 0x30220)
EstimateReconstructWindowsRAMNeeds (Ordinal: 86, Address: 0x30490)
FileVersionFromString (Ordinal: 87, Address: 0x3ea90)
GetCWcpDll (Ordinal: 88, Address: 0x676a0)
GetIdentityAuthority (Ordinal: 89, Address: 0x71ac0)
GetLoadedHiveKeyName (Ordinal: 90, Address: 0x65490)
GetNextFileMapContentInternal (Ordinal: 91, Address: 0x6f3d0)
GetTemporaryPath (Ordinal: 92, Address: 0x65930)
GetUpdateReserveManagerLoader (Ordinal: 93, Address: 0x6e4e0)
IsKeyProtected (Ordinal: 94, Address: 0x70190)
IsLuaCdfFile (Ordinal: 95, Address: 0x6f400)
LoadUpdateReserveManager (Ordinal: 96, Address: 0x6e590)
ReconstructWindowsEx2 (Ordinal: 97, Address: 0x30500)
ReconstructWindowsEx (Ordinal: 98, Address: 0x304c0)
RemoveFileProtection (Ordinal: 99, Address: 0x70520)
RemoveRegKeyProtection (Ordinal: 100, Address: 0x70c30)
RtlAllocateLBlob (Ordinal: 101, Address: 0x61070)
RtlAllocateLUnicodeString (Ordinal: 102, Address: 0x5b680)
RtlAllocateLUtf8String (Ordinal: 103, Address: 0x5e7c0)
RtlAllocateUnicodeString (Ordinal: 104, Address: 0x5b5d0)
RtlAppendUcsCharacterToLUnicodeString (Ordinal: 105, Address: 0x5cc80)
RtlAppendUcsCharacterToLUtf8String (Ordinal: 106, Address: 0x5df40)
RtlAppendUcsCharactersToLUnicodeString (Ordinal: 107, Address: 0x5cb40)
RtlBase64EncodeLBlobToLUnicodeString (Ordinal: 108, Address: 0x601d0)
RtlBase64EncodeLBlobToLUtf8String (Ordinal: 109, Address: 0x60340)
RtlCalculateUtf16StringLengthFromLUtf8String (Ordinal: 110, Address: 0x5e670)
RtlCompareEncodedLBlobs (Ordinal: 111, Address: 0x61720)
RtlCompareLUnicodeStringToLUtf8String (Ordinal: 112, Address: 0x5e810)
RtlCompareLUnicodeStrings (Ordinal: 113, Address: 0x5b9b0)
RtlCompareLUtf8StringToLUnicodeString (Ordinal: 114, Address: 0x5da90)
RtlCompareLUtf8Strings (Ordinal: 115, Address: 0x5e7e0)
RtlConcatenateLUnicodeStrings (Ordinal: 116, Address: 0x5bea0)
RtlConcatenateLUtf8Strings (Ordinal: 117, Address: 0x5dc70)
RtlCreateDefaultMicrodomXmlWriter (Ordinal: 118, Address: 0x46310)
RtlCreateDefaultXmlWriter (Ordinal: 119, Address: 0x47640)
RtlCreateFilteringMicrodomWriter (Ordinal: 120, Address: 0x487e0)
RtlCreateMicrodom (Ordinal: 121, Address: 0x4d660)
RtlCreateUtf16LEUCSStringBuilder (Ordinal: 122, Address: 0x64650)
RtlCreateUtf8UCSStringBuilder (Ordinal: 123, Address: 0x64420)
RtlDecodeBase64LUnicodeStringToLBlob (Ordinal: 124, Address: 0x60a60)
RtlDecodeBase64LUtf8StringToLBlob (Ordinal: 125, Address: 0x608d0)
RtlDestroyGrowingList (Ordinal: 126, Address: 0x4ec50)
RtlDetermineFilteredLUnicodeStringLength (Ordinal: 127, Address: 0x5d400)
RtlDetermineTranscodedLBlobSize (Ordinal: 128, Address: 0x5f3c0)
RtlDoesLUnicodeStringMatchExpression (Ordinal: 129, Address: 0x5ccf0)
RtlDuplicateLUnicodeStringToUnicodeString (Ordinal: 130, Address: 0x5c290)
RtlEqualLUnicodeStringPrefix (Ordinal: 131, Address: 0x5c3a0)
RtlEqualLUnicodeStrings (Ordinal: 132, Address: 0x5c3f0)
RtlEqualLUtf8StringPrefix (Ordinal: 133, Address: 0x5e840)
RtlEqualLUtf8Strings (Ordinal: 134, Address: 0x5e020)
RtlExecuteXPathOverMicrodom (Ordinal: 135, Address: 0x50420)
RtlFilterLUnicodeString (Ordinal: 136, Address: 0x5d580)
RtlGetHashAlgorithmHashLength (Ordinal: 137, Address: 0x5fbb0)
RtlHashLBlob (Ordinal: 138, Address: 0x5fe30)
RtlIndexIntoGrowingList (Ordinal: 139, Address: 0x4eb80)
RtlInitializeGrowingList (Ordinal: 140, Address: 0x4ea20)
RtlInitializeSmartLBlobWritingContext (Ordinal: 141, Address: 0x60be0)
RtlInitializeSmartLUnicodeStringWritingContext (Ordinal: 142, Address: 0x5e960)
RtlInitializeSmartLUtf8StringWritingContext (Ordinal: 143, Address: 0x5ea30)
RtlMatchEncodedLBlobAgainstList (Ordinal: 144, Address: 0x622d0)
RtlMatchEncodedLBlobAgainstPointerList (Ordinal: 145, Address: 0x62360)
RtlMatchLUnicodeStringAgainstLUtf8StringList (Ordinal: 146, Address: 0x5c5b0)
RtlMatchLUnicodeStringAgainstLUtf8StringPointerList (Ordinal: 147, Address: 0x5c840)
RtlMatchLUnicodeStringAgainstList (Ordinal: 148, Address: 0x5c460)
RtlMatchLUnicodeStringAgainstPointerList (Ordinal: 149, Address: 0x5c700)
RtlMatchLUtf8StringAgainstLUnicodeStringList (Ordinal: 150, Address: 0x5e200)
RtlMatchLUtf8StringAgainstLUnicodeStringPointerList (Ordinal: 151, Address: 0x5e490)
RtlMatchLUtf8StringAgainstList (Ordinal: 152, Address: 0x5e0b0)
RtlMatchLUtf8StringAgainstPointerList (Ordinal: 153, Address: 0x5e350)
RtlMurmurHashLBlob (Ordinal: 154, Address: 0x64880)
RtlNsDestroy (Ordinal: 155, Address: 0x509c0)
RtlNsInitialize (Ordinal: 156, Address: 0x50940)
RtlReallocateLBlob (Ordinal: 157, Address: 0x5f100)
RtlReallocateLUnicodeString (Ordinal: 158, Address: 0x5ca90)
RtlReallocateLUtf8String (Ordinal: 159, Address: 0x5e5d0)
RtlReallocateUnicodeString (Ordinal: 160, Address: 0x5c980)
RtlRegisterErrorOriginationCallback (Ordinal: 161, Address: 0x648b0)
RtlReportErrorOrigination (Ordinal: 162, Address: 0x648f0)
RtlReportErrorPropagation (Ordinal: 163, Address: 0x648d0)
RtlSplitEncodedLBlob (Ordinal: 164, Address: 0x5f690)
RtlSplitLUnicodeString (Ordinal: 165, Address: 0x5bc40)
RtlSplitLUtf8String (Ordinal: 166, Address: 0x5dac0)
RtlTranscodeLBlobs (Ordinal: 167, Address: 0x61100)
RtlWriteDecodedUcsDataIntoSmartLBlobUcsWritingContext (Ordinal: 168, Address: 0x5eb10)
RtlWriteMicrodomXml (Ordinal: 169, Address: 0x463b0)
RtlXmlDefaultCompareStrings (Ordinal: 170, Address: 0x50f70)
RtlXmlDestroyNextLogicalThing (Ordinal: 171, Address: 0x54800)
RtlXmlDetermineStreamEncoding (Ordinal: 172, Address: 0x54540)
RtlXmlExtentToString (Ordinal: 173, Address: 0x568c0)
RtlXmlInitializeNextLogicalThing (Ordinal: 174, Address: 0x54820)
RtlXmlInitializeTokenization (Ordinal: 175, Address: 0x54480)
RtlXmlNextLogicalThing (Ordinal: 176, Address: 0x56240)
RtlXmlNextToken (Ordinal: 177, Address: 0x53140)
SczAlloc (Ordinal: 178, Address: 0x3f480)
SczAllocConcat2Sz (Ordinal: 179, Address: 0x3f800)
SczAllocConcatSz (Ordinal: 180, Address: 0x3f6c0)
SczAllocFormatted (Ordinal: 181, Address: 0x3fa30)
SczAllocFromAnsiSz (Ordinal: 182, Address: 0x3fd70)
SczAllocFromSz (Ordinal: 183, Address: 0x3fc10)
SczAllocPrefixSz (Ordinal: 184, Address: 0x3f550)
SczEnsureBackslashTerminated (Ordinal: 185, Address: 0x3fed0)
SczFree (Ordinal: 186, Address: 0x3feb0)
SfpCreateOfflineRepairObject (Ordinal: 187, Address: 0x6e0c0)
SfpUnload (Ordinal: 188, Address: 0x6e2d0)
StringsAreEqualCaseInsensitive (Ordinal: 189, Address: 0x3fff0)
SzEnsureBackslashTerminated (Ordinal: 190, Address: 0x3ff40)
UninstallWindows (Ordinal: 191, Address: 0x74c90)

Imported DLLs & Functions

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x100ac03c)
AcquireSRWLockShared (Address: 0x100ac044)
CloseHandle (Address: 0x100ac050)
CloseThreadpoolTimer (Address: 0x100ac064)
CompareFileTime (Address: 0x100ac0fc)
CompareStringOrdinal (Address: 0x100ac12c)
CopyFileExW (Address: 0x100ac0c8)
CopyFileW (Address: 0x100ac08c)
CreateDirectoryW (Address: 0x100ac088)
CreateEventW (Address: 0x100ac1d8)
CreateFileW (Address: 0x100ac0cc)
CreateHardLinkW (Address: 0x100ac0e4)
CreateMutexExW (Address: 0x100ac0a8)
CreateSemaphoreExW (Address: 0x100ac0ac)
CreateThreadpoolTimer (Address: 0x100ac080)
DebugBreak (Address: 0x100ac030)
DecodePointer (Address: 0x100ac11c)
DelayLoadFailureHook (Address: 0x100ac204)
DeleteCriticalSection (Address: 0x100ac074)
DeleteFileW (Address: 0x100ac09c)
DeviceIoControl (Address: 0x100ac1f4)
EncodePointer (Address: 0x100ac1f0)
EnterCriticalSection (Address: 0x100ac06c)
EnumResourceLanguagesExW (Address: 0x100ac218)
ExitProcess (Address: 0x100ac168)
ExpandEnvironmentStringsW (Address: 0x100ac220)
FindClose (Address: 0x100ac0e8)
FindFirstFileExW (Address: 0x100ac0dc)
FindFirstFileW (Address: 0x100ac100)
FindNextFileW (Address: 0x100ac0e0)
FindResourceExW (Address: 0x100ac210)
FlsAlloc (Address: 0x100ac180)
FlsFree (Address: 0x100ac18c)
FlsGetValue (Address: 0x100ac184)
FlsSetValue (Address: 0x100ac188)
FlushFileBuffers (Address: 0x100ac128)
FormatMessageW (Address: 0x100ac014)
FreeEnvironmentStringsW (Address: 0x100ac130)
FreeLibrary (Address: 0x100ac010)
GetACP (Address: 0x100ac174)
GetCommandLineA (Address: 0x100ac200)
GetCommandLineW (Address: 0x100ac1fc)
GetCompressedFileSizeW (Address: 0x100ac0b8)
GetConsoleMode (Address: 0x100ac1b0)
GetConsoleOutputCP (Address: 0x100ac1ac)
GetCPInfo (Address: 0x100ac17c)
GetCurrentProcess (Address: 0x100ac0d0)
GetCurrentProcessId (Address: 0x100ac0a4)
GetCurrentThreadId (Address: 0x100ac018)
GetDiskFreeSpaceW (Address: 0x100ac0b4)
GetEnvironmentStringsW (Address: 0x100ac1f8)
GetEnvironmentVariableW (Address: 0x100ac108)
GetErrorMode (Address: 0x100ac090)
GetFileAttributesExW (Address: 0x100ac124)
GetFileAttributesW (Address: 0x100ac084)
GetFileSizeEx (Address: 0x100ac0f4)
GetFileType (Address: 0x100ac19c)
GetLastError (Address: 0x100ac118)
GetLocalTime (Address: 0x100ac158)
GetModuleFileNameA (Address: 0x100ac02c)
GetModuleFileNameW (Address: 0x100ac134)
GetModuleHandleExW (Address: 0x100ac000)
GetModuleHandleW (Address: 0x100ac024)
GetOEMCP (Address: 0x100ac178)
GetProcAddress (Address: 0x100ac008)
GetProcessHeap (Address: 0x100ac01c)
GetStartupInfoW (Address: 0x100ac1a0)
GetStdHandle (Address: 0x100ac198)
GetStringTypeW (Address: 0x100ac16c)
GetSystemTime (Address: 0x100ac110)
GetSystemTimeAsFileTime (Address: 0x100ac0d8)
GetSystemWindowsDirectoryW (Address: 0x100ac098)
GetTempPathW (Address: 0x100ac144)
GetWindowsDirectoryW (Address: 0x100ac148)
HeapAlloc (Address: 0x100ac020)
HeapFree (Address: 0x100ac028)
HeapReAlloc (Address: 0x100ac1c8)
HeapSize (Address: 0x100ac1c4)
InitializeCriticalSectionAndSpinCount (Address: 0x100ac1cc)
InitializeCriticalSectionEx (Address: 0x100ac070)
InitializeSListHead (Address: 0x100ac1e0)
InitOnceBeginInitialize (Address: 0x100ac13c)
InitOnceComplete (Address: 0x100ac140)
InterlockedFlushSList (Address: 0x100ac1e8)
IsDebuggerPresent (Address: 0x100ac034)
IsProcessorFeaturePresent (Address: 0x100ac164)
IsValidCodePage (Address: 0x100ac170)
LCMapStringW (Address: 0x100ac194)
LeaveCriticalSection (Address: 0x100ac0b0)
LoadLibraryExA (Address: 0x100ac208)
LoadLibraryExW (Address: 0x100ac004)
LoadLibraryW (Address: 0x100ac10c)
LoadResource (Address: 0x100ac20c)
LocalAlloc (Address: 0x100ac0bc)
LocalFree (Address: 0x100ac0c0)
LockResource (Address: 0x100ac214)
lstrcmpiW (Address: 0x100ac14c)
lstrcmpW (Address: 0x100ac154)
MoveFileExW (Address: 0x100ac0c4)
MultiByteToWideChar (Address: 0x100ac0f8)
OpenSemaphoreW (Address: 0x100ac07c)
OutputDebugStringA (Address: 0x100ac104)
OutputDebugStringW (Address: 0x100ac038)
PrivCopyFileExW (Address: 0x100ac114)
QueryPerformanceCounter (Address: 0x100ac1dc)
RaiseException (Address: 0x100ac1ec)
ReadConsoleW (Address: 0x100ac1b8)
ReadFile (Address: 0x100ac0f0)
ReleaseMutex (Address: 0x100ac058)
ReleaseSemaphore (Address: 0x100ac054)
ReleaseSRWLockExclusive (Address: 0x100ac040)
ReleaseSRWLockShared (Address: 0x100ac048)
RemoveDirectoryW (Address: 0x100ac0a0)
ResetEvent (Address: 0x100ac1d4)
RtlUnwind (Address: 0x100ac1e4)
SetCurrentDirectoryW (Address: 0x100ac150)
SetEndOfFile (Address: 0x100ac1b4)
SetEnvironmentVariableW (Address: 0x100ac00c)
SetErrorMode (Address: 0x100ac094)
SetEvent (Address: 0x100ac1d0)
SetFilePointer (Address: 0x100ac120)
SetFilePointerEx (Address: 0x100ac1bc)
SetLastError (Address: 0x100ac04c)
SetStdHandle (Address: 0x100ac1a4)
SetThreadpoolTimer (Address: 0x100ac05c)
SetUnhandledExceptionFilter (Address: 0x100ac160)
SizeofResource (Address: 0x100ac21c)
Sleep (Address: 0x100ac0d4)
TerminateProcess (Address: 0x100ac138)
UnhandledExceptionFilter (Address: 0x100ac15c)
VirtualProtect (Address: 0x100ac190)
WaitForSingleObject (Address: 0x100ac078)
WaitForSingleObjectEx (Address: 0x100ac068)
WaitForThreadpoolTimerCallbacks (Address: 0x100ac060)
WideCharToMultiByte (Address: 0x100ac0ec)
WriteConsoleW (Address: 0x100ac1c0)
WriteFile (Address: 0x100ac1a8)

ntdll.dll

DbgPrint (Address: 0x100ac2b8)
DbgPrintEx (Address: 0x100ac254)
LdrGetDllHandleEx (Address: 0x100ac2b4)
LdrGetProcedureAddress (Address: 0x100ac2a4)
LdrUnloadDll (Address: 0x100ac2b0)
NtAdjustPrivilegesToken (Address: 0x100ac264)
NtClose (Address: 0x100ac30c)
NtCreateFile (Address: 0x100ac330)
NtDelayExecution (Address: 0x100ac260)
NtDuplicateToken (Address: 0x100ac280)
NtFlushKey (Address: 0x100ac318)
NtFsControlFile (Address: 0x100ac228)
NtLoadKey2 (Address: 0x100ac28c)
NtOpenFile (Address: 0x100ac2e8)
NtOpenKey (Address: 0x100ac2ac)
NtOpenKeyEx (Address: 0x100ac32c)
NtOpenProcessToken (Address: 0x100ac270)
NtOpenThreadToken (Address: 0x100ac290)
NtPrivilegeCheck (Address: 0x100ac294)
NtQueryDirectoryFile (Address: 0x100ac2e0)
NtQueryInformationFile (Address: 0x100ac234)
NtQueryObject (Address: 0x100ac23c)
NtQueryPerformanceCounter (Address: 0x100ac22c)
NtQueryValueKey (Address: 0x100ac2bc)
NtReadFile (Address: 0x100ac2d0)
NtSetInformationThread (Address: 0x100ac240)
NtUnloadKey2 (Address: 0x100ac310)
NtWriteFile (Address: 0x100ac2a8)
NtYieldExecution (Address: 0x100ac244)
RtlAdjustPrivilege (Address: 0x100ac300)
RtlAllocateAndInitializeSid (Address: 0x100ac288)
RtlAllocateHeap (Address: 0x100ac328)
RtlCopyMappedMemory (Address: 0x100ac2d8)
RtlCopyUnicodeString (Address: 0x100ac338)
RtlCreateSecurityDescriptor (Address: 0x100ac29c)
RtlCreateServiceSid (Address: 0x100ac2f0)
RtlCreateUnicodeString (Address: 0x100ac2fc)
RtlCreateUnicodeStringFromAsciiz (Address: 0x100ac2c0)
RtlDeleteCriticalSection (Address: 0x100ac31c)
RtlDosPathNameToNtPathName_U (Address: 0x100ac230)
RtlDowncaseUnicodeChar (Address: 0x100ac250)
RtlEnterCriticalSection (Address: 0x100ac308)
RtlEqualSid (Address: 0x100ac2f4)
RtlFormatCurrentUserKeyPath (Address: 0x100ac248)
RtlFreeHeap (Address: 0x100ac320)
RtlFreeUnicodeString (Address: 0x100ac2cc)
RtlGetControlSecurityDescriptor (Address: 0x100ac278)
RtlHashUnicodeString (Address: 0x100ac334)
RtlInitializeCriticalSection (Address: 0x100ac304)
RtlInitUnicodeString (Address: 0x100ac238)
RtlLeaveCriticalSection (Address: 0x100ac340)
RtlLengthSecurityDescriptor (Address: 0x100ac26c)
RtlMakeSelfRelativeSD (Address: 0x100ac27c)
RtlMapGenericMask (Address: 0x100ac2ec)
RtlNtStatusToDosError (Address: 0x100ac2f8)
RtlNtStatusToDosErrorNoTeb (Address: 0x100ac25c)
RtlQueryEnvironmentVariable_U (Address: 0x100ac314)
RtlRaiseStatus (Address: 0x100ac324)
RtlReAllocateHeap (Address: 0x100ac258)
RtlSetControlSecurityDescriptor (Address: 0x100ac33c)
RtlSetDaclSecurityDescriptor (Address: 0x100ac284)
RtlSetGroupSecurityDescriptor (Address: 0x100ac298)
RtlSetOwnerSecurityDescriptor (Address: 0x100ac274)
RtlSetSaclSecurityDescriptor (Address: 0x100ac268)
RtlTimeToTimeFields (Address: 0x100ac2a0)
RtlUpcaseUnicodeChar (Address: 0x100ac24c)
ZwClose (Address: 0x100ac2e4)
ZwCreateSection (Address: 0x100ac2c8)
ZwMapViewOfSection (Address: 0x100ac2d4)
ZwQueryInformationFile (Address: 0x100ac2dc)
ZwUnmapViewOfSection (Address: 0x100ac2c4)