ServicingCommon.dll

Description: Servicing Base DLL

Version: 10.0.26063.1002

Architecture: 64-bit

Operating System: Windows NT

SHA256: d9c633d422ab567a7cb2c15963a916f9

File Size: 1000.8 KB

Uploaded At: Dec. 3, 2025, 2:42 a.m.

Views: 7

Exported Functions

CBSWdsLog (Ordinal: 1, Address: 0x3bf30)
CreateKeyformFromAttributesIntoBuffer (Ordinal: 2, Address: 0x8c790)
RecursiveCopy (Ordinal: 3, Address: 0x3dbb0)
SetCustomLogging (Ordinal: 4, Address: 0x3c880)
BeginFileMapEnumerationInternal (Ordinal: 5, Address: 0x94860)
CbsCreateOfflineSession (Ordinal: 6, Address: 0x25d50)
CbsCreateOfflineSessionFromStackInImage (Ordinal: 7, Address: 0x2dc40)
CbsFindServicingStackDirectory (Ordinal: 8, Address: 0x25330)
CbsGetSsBinaryPathFromTargetImage (Ordinal: 9, Address: 0x2dc60)
CbsLoadSssFromTargetImage (Ordinal: 10, Address: 0x2dcf0)
CbsOfflineFinalize (Ordinal: 11, Address: 0x25d70)
CbsOfflineFinalizeNoShutdownImageStack (Ordinal: 12, Address: 0x25d90)
CbsOfflineSetLogFile (Ordinal: 13, Address: 0x25db0)
CbsShutdownImageStack (Ordinal: 14, Address: 0x2dd10)
CloseFileMapEnumerationInternal (Ordinal: 15, Address: 0x94bd0)
CompareObjectSDToSddl (Ordinal: 16, Address: 0x95080)
ConvertHResultToNtStatus (Ordinal: 17, Address: 0x88380)
ConvertNtStatusToHResult (Ordinal: 18, Address: 0x88610)
DecompressManifest (Ordinal: 19, Address: 0x8d850)
EstimateReconstructWindowsDiskNeeds (Ordinal: 20, Address: 0x33d00)
EstimateReconstructWindowsRAMNeeds (Ordinal: 21, Address: 0x34030)
FileVersionFromString (Ordinal: 22, Address: 0x3f500)
GetCWcpDll (Ordinal: 23, Address: 0x8be10)
GetIdentityAuthority (Ordinal: 24, Address: 0x9a500)
GetLoadedHiveKeyName (Ordinal: 25, Address: 0x89360)
GetNextFileMapContentInternal (Ordinal: 26, Address: 0x94c10)
GetTemporaryPath (Ordinal: 27, Address: 0x894d0)
GetUpdateReserveManagerLoader (Ordinal: 28, Address: 0x93b10)
IsKeyProtected (Ordinal: 29, Address: 0x95bb0)
IsLuaCdfFile (Ordinal: 30, Address: 0x94c20)
LoadUpdateReserveManager (Ordinal: 31, Address: 0x93c20)
ReconstructWindowsEx (Ordinal: 32, Address: 0x34070)
ReconstructWindowsEx2 (Ordinal: 33, Address: 0x340d0)
RemoveFileProtection (Ordinal: 34, Address: 0x96b00)
RemoveRegKeyProtection (Ordinal: 35, Address: 0x96e60)
RtlAllocateLBlob (Ordinal: 36, Address: 0x7c790)
RtlAllocateLUnicodeString (Ordinal: 37, Address: 0x80340)
RtlAllocateLUtf8String (Ordinal: 38, Address: 0x82df0)
RtlAllocateUnicodeString (Ordinal: 39, Address: 0x80430)
RtlAppendLUnicodeStringToLUnicodeString (Ordinal: 40, Address: 0x80510)
RtlAppendLUtf8StringToLUtf8String (Ordinal: 41, Address: 0x82e00)
RtlAppendUcsCharacterToLUnicodeString (Ordinal: 42, Address: 0x80850)
RtlAppendUcsCharacterToLUtf8String (Ordinal: 43, Address: 0x82f90)
RtlAppendUcsCharactersToLUnicodeString (Ordinal: 44, Address: 0x808a0)
RtlBase64EncodeLBlobToLUnicodeString (Ordinal: 45, Address: 0x7c9b0)
RtlBase64EncodeLBlobToLUtf8String (Ordinal: 46, Address: 0x7cbd0)
RtlCalculateUtf16StringLengthFromLUtf8String (Ordinal: 47, Address: 0x830d0)
RtlCommitSmartLBlobUcsWritingContext (Ordinal: 48, Address: 0x3bcf0)
RtlCommitSmartLBlobWritingContext (Ordinal: 49, Address: 0x3bcf0)
RtlCompareEncodedLBlobs (Ordinal: 50, Address: 0x7cdf0)
RtlCompareLUnicodeStringToLUtf8String (Ordinal: 51, Address: 0x83290)
RtlCompareLUnicodeStrings (Ordinal: 52, Address: 0x80a60)
RtlCompareLUtf8StringToLUnicodeString (Ordinal: 53, Address: 0x832c0)
RtlCompareLUtf8Strings (Ordinal: 54, Address: 0x832f0)
RtlConcatenateLUnicodeStrings (Ordinal: 55, Address: 0x80a90)
RtlConcatenateLUtf8Strings (Ordinal: 56, Address: 0x83320)
RtlConvertNtFilePathToWin32FilePath (Ordinal: 57, Address: 0x85940)
RtlConvertNtRegistryPathToWin32RegistryPath (Ordinal: 58, Address: 0x85d60)
RtlConvertWin32FilePathToNtFilePath (Ordinal: 59, Address: 0x85e20)
RtlConvertWin32RegistryPathToNtRegistryPath (Ordinal: 60, Address: 0x86120)
RtlCopyLUnicodeString (Ordinal: 61, Address: 0x80cf0)
RtlCopyLUtf8String (Ordinal: 62, Address: 0x83580)
RtlCopyLUtf8StringToLUnicodeString (Ordinal: 63, Address: 0x836b0)
RtlCreateDefaultMicrodomXmlWriter (Ordinal: 64, Address: 0x443b0)
RtlCreateDefaultXmlWriter (Ordinal: 65, Address: 0x45aa0)
RtlCreateFilteringMicrodomWriter (Ordinal: 66, Address: 0x468a0)
RtlCreateMicrodom (Ordinal: 67, Address: 0x4da30)
RtlCreateMicrodomUpdateContext (Ordinal: 68, Address: 0x51780)
RtlCreateUpdatedMicrodomAsMicrodom (Ordinal: 69, Address: 0x518c0)
RtlCreateUpdatedMicrodomAsUtf8 (Ordinal: 70, Address: 0x51a00)
RtlCreateUtf16LEUCSStringBuilder (Ordinal: 71, Address: 0x86d30)
RtlCreateUtf8UCSStringBuilder (Ordinal: 72, Address: 0x86ec0)
RtlCreateXMLDSIGSession (Ordinal: 73, Address: 0x645f0)
RtlDeallocateUnicodeString (Ordinal: 74, Address: 0x80e20)
RtlDecodeBase64LUnicodeStringToLBlob (Ordinal: 75, Address: 0x7d2a0)
RtlDecodeBase64LUtf8StringToLBlob (Ordinal: 76, Address: 0x7d4a0)
RtlDecodeUtf16LE (Ordinal: 77, Address: 0x87240)
RtlDecodeUtf8 (Ordinal: 78, Address: 0x872d0)
RtlDestroyGrowingList (Ordinal: 79, Address: 0x649a0)
RtlDestroyMicrodomUpdateContext (Ordinal: 80, Address: 0x51b40)
RtlDetermineFilteredLUnicodeStringLength (Ordinal: 81, Address: 0x80e50)
RtlDetermineTranscodedLBlobSize (Ordinal: 82, Address: 0x7d6e0)
RtlDoesLUnicodeStringMatchExpression (Ordinal: 83, Address: 0x80fe0)
RtlDowncaseUCSCharacter (Ordinal: 84, Address: 0x87700)
RtlDuplicateLBlob (Ordinal: 85, Address: 0x7dac0)
RtlDuplicateLUnicodeString (Ordinal: 86, Address: 0x81630)
RtlDuplicateLUnicodeStringToLUtf8String (Ordinal: 87, Address: 0x838d0)
RtlDuplicateLUnicodeStringToUnicodeString (Ordinal: 88, Address: 0x81710)
RtlDuplicateLUtf8String (Ordinal: 89, Address: 0x839b0)
RtlDuplicateLUtf8StringToLUnicodeString (Ordinal: 90, Address: 0x83a90)
RtlDuplicateNullTerminatedStringToLUnicodeString (Ordinal: 91, Address: 0x818b0)
RtlDuplicateUnicodeStringToLUnicodeString (Ordinal: 92, Address: 0x81940)
RtlEncodeUtf16LE (Ordinal: 93, Address: 0x87960)
RtlEncodeUtf8 (Ordinal: 94, Address: 0x87ae0)
RtlEqualLUnicodeStringPrefix (Ordinal: 95, Address: 0x81a20)
RtlEqualLUnicodeStrings (Ordinal: 96, Address: 0x81a60)
RtlEqualLUtf8StringPrefix (Ordinal: 97, Address: 0x83b70)
RtlEqualLUtf8Strings (Ordinal: 98, Address: 0x83cc0)
RtlExecuteXPathOverMicrodom (Ordinal: 99, Address: 0x66ca0)
RtlFilterLUnicodeString (Ordinal: 100, Address: 0x81ae0)
RtlFinalizeSmartLBlobUcsWritingContext (Ordinal: 101, Address: 0x25c70)
RtlFinalizeSmartLBlobWritingContext (Ordinal: 102, Address: 0x25c70)
RtlFreeLBlob (Ordinal: 103, Address: 0x7dc40)
RtlFreeLUnicodeString (Ordinal: 104, Address: 0x7dc40)
RtlFreeLUtf8String (Ordinal: 105, Address: 0x7dc40)
RtlGetEncodingSizeUcs2 (Ordinal: 106, Address: 0x87e10)
RtlGetEncodingSizeUtf16 (Ordinal: 107, Address: 0x87e40)
RtlGetEncodingSizeUtf8 (Ordinal: 108, Address: 0x84e10)
RtlGetHashAlgorithmHashLength (Ordinal: 109, Address: 0x7dc70)
RtlHashLBlob (Ordinal: 110, Address: 0x7e550)
RtlHashLUnicodeString (Ordinal: 111, Address: 0x81c70)
RtlHashLUtf8String (Ordinal: 112, Address: 0x83d70)
RtlIndexIntoGrowingList (Ordinal: 113, Address: 0x64a30)
RtlInitLUnicodeStringFromNullTerminatedString (Ordinal: 114, Address: 0x81c90)
RtlInitLUnicodeStringFromUnicodeString (Ordinal: 115, Address: 0x81d30)
RtlInitUnicodeStringFromLUnicodeString (Ordinal: 116, Address: 0x81dc0)
RtlInitializeGrowingList (Ordinal: 117, Address: 0x64b30)
RtlInitializeSmartLBlobWritingContext (Ordinal: 118, Address: 0x7eb90)
RtlInitializeSmartLUnicodeStringWritingContext (Ordinal: 119, Address: 0x84c80)
RtlInitializeSmartLUtf8StringWritingContext (Ordinal: 120, Address: 0x84dc0)
RtlIsLBlobValid (Ordinal: 121, Address: 0x7ed70)
RtlIsLUnicodeStringValid (Ordinal: 122, Address: 0x81f40)
RtlIsLUtf8StringValid (Ordinal: 123, Address: 0x83d90)
RtlLengthOfUcsCharacterEncodedAsUtf8 (Ordinal: 124, Address: 0x84e10)
RtlMatchEncodedLBlobAgainstList (Ordinal: 125, Address: 0x7eda0)
RtlMatchEncodedLBlobAgainstPointerList (Ordinal: 126, Address: 0x7ee50)
RtlMatchLUnicodeStringAgainstLUtf8StringList (Ordinal: 127, Address: 0x81fb0)
RtlMatchLUnicodeStringAgainstLUtf8StringPointerList (Ordinal: 128, Address: 0x821b0)
RtlMatchLUnicodeStringAgainstList (Ordinal: 129, Address: 0x823a0)
RtlMatchLUnicodeStringAgainstPointerList (Ordinal: 130, Address: 0x825a0)
RtlMatchLUtf8StringAgainstLUnicodeStringList (Ordinal: 131, Address: 0x83dc0)
RtlMatchLUtf8StringAgainstLUnicodeStringPointerList (Ordinal: 132, Address: 0x83fc0)
RtlMatchLUtf8StringAgainstList (Ordinal: 133, Address: 0x841b0)
RtlMatchLUtf8StringAgainstPointerList (Ordinal: 134, Address: 0x843b0)
RtlMicrodomUpdateCreateAttributeNs (Ordinal: 135, Address: 0x51bf0)
RtlMicrodomUpdateCreateElementNs (Ordinal: 136, Address: 0x51da0)
RtlMicrodomUpdateCreateTextual (Ordinal: 137, Address: 0x52020)
RtlMicrodomUpdateGetCookieForExistingAttribute (Ordinal: 138, Address: 0x52160)
RtlMicrodomUpdateGetCookieForExistingNode (Ordinal: 139, Address: 0x521f0)
RtlMicrodomUpdateInsertChild (Ordinal: 140, Address: 0x52290)
RtlMicrodomUpdateInsertMicrodomNodeEx (Ordinal: 141, Address: 0x52400)
RtlMicrodomUpdateRemoveChild (Ordinal: 142, Address: 0x526e0)
RtlMicrodomUpdateRemoveElement (Ordinal: 143, Address: 0x527f0)
RtlMicrodomUpdateSetNodeName (Ordinal: 144, Address: 0x528a0)
RtlMicrodomUpdateSetNodeTextContent (Ordinal: 145, Address: 0x529d0)
RtlMurmurHashLBlob (Ordinal: 146, Address: 0x88100)
RtlNsDestroy (Ordinal: 147, Address: 0x672e0)
RtlNsInitialize (Ordinal: 148, Address: 0x67440)
RtlPreInitializeSmartLBlobUcsWritingContext (Ordinal: 149, Address: 0x84e70)
RtlPreInitializeSmartLBlobWritingContext (Ordinal: 150, Address: 0x7ef00)
RtlReallocateLBlob (Ordinal: 151, Address: 0x7ef20)
RtlReallocateLUnicodeString (Ordinal: 152, Address: 0x82790)
RtlReallocateLUtf8String (Ordinal: 153, Address: 0x845a0)
RtlReallocateUnicodeString (Ordinal: 154, Address: 0x828b0)
RtlRegisterErrorOriginationCallback (Ordinal: 155, Address: 0x88120)
RtlReportErrorOrigination (Ordinal: 156, Address: 0x88130)
RtlReportErrorPropagation (Ordinal: 157, Address: 0x881d0)
RtlSmartMultiUcsEncoder_Utf16LE (Ordinal: 158, Address: 0x84ea0)
RtlSmartMultiUcsEncoder_Utf8 (Ordinal: 159, Address: 0x84eb0)
RtlSmartUcsEncoder_Utf16LE (Ordinal: 160, Address: 0x84ec0)
RtlSmartUcsEncoder_Utf8 (Ordinal: 161, Address: 0x84f10)
RtlSplitEncodedLBlob (Ordinal: 162, Address: 0x7f0b0)
RtlSplitLUnicodeString (Ordinal: 163, Address: 0x82ab0)
RtlSplitLUtf8String (Ordinal: 164, Address: 0x84690)
RtlSplitWin32RegistryPathIntoRootAndLeaves (Ordinal: 165, Address: 0x86280)
RtlTranscodeLBlobs (Ordinal: 166, Address: 0x7f640)
RtlUpcaseUCSCharacter (Ordinal: 167, Address: 0x87740)
RtlWriteDataIntoSmartLBlobWritingContext (Ordinal: 168, Address: 0x7fd10)
RtlWriteDecodedUcsDataIntoSmartLBlobUcsWritingContext (Ordinal: 169, Address: 0x84f60)
RtlWriteMicrodomXml (Ordinal: 170, Address: 0x445d0)
RtlXmlDefaultCompareStrings (Ordinal: 171, Address: 0x6a150)
RtlXmlDestroyNextLogicalThing (Ordinal: 172, Address: 0x6c770)
RtlXmlDetermineStreamEncoding (Ordinal: 173, Address: 0x6a3b0)
RtlXmlExtentToString (Ordinal: 174, Address: 0x6c790)
RtlXmlInitializeNextLogicalThing (Ordinal: 175, Address: 0x6cc50)
RtlXmlInitializeTokenization (Ordinal: 176, Address: 0x6a680)
RtlXmlNextLogicalThing (Ordinal: 177, Address: 0x6cda0)
RtlXmlNextToken (Ordinal: 178, Address: 0x6a760)
SczAlloc (Ordinal: 179, Address: 0x3fa30)
SczAllocConcat2Sz (Ordinal: 180, Address: 0x3fbd0)
SczAllocConcatSz (Ordinal: 181, Address: 0x3fd80)
SczAllocFormatted (Ordinal: 182, Address: 0x3fee0)
SczAllocFromAnsiSz (Ordinal: 183, Address: 0x40180)
SczAllocFromSz (Ordinal: 184, Address: 0x402e0)
SczAllocPrefixSz (Ordinal: 185, Address: 0x404a0)
SczEnsureBackslashTerminated (Ordinal: 186, Address: 0x40620)
SczFree (Ordinal: 187, Address: 0x406a0)
SfpCreateOfflineRepairObject (Ordinal: 188, Address: 0x92ea0)
SfpUnload (Ordinal: 189, Address: 0x93150)
StringsAreEqualCaseInsensitive (Ordinal: 190, Address: 0x40720)
SzEnsureBackslashTerminated (Ordinal: 191, Address: 0x40760)
UninstallWindows (Ordinal: 192, Address: 0x9c780)

Imported DLLs & Functions

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1800b74a0)
AcquireSRWLockShared (Address: 0x1800b74b0)
CloseHandle (Address: 0x1800b74c8)
CloseThreadpoolTimer (Address: 0x1800b74f0)
CompareFileTime (Address: 0x1800b7610)
CompareStringOrdinal (Address: 0x1800b7668)
CopyFileExW (Address: 0x1800b75a8)
CopyFileW (Address: 0x1800b7540)
CreateDirectoryW (Address: 0x1800b7538)
CreateEventW (Address: 0x1800b77e8)
CreateFileW (Address: 0x1800b75b0)
CreateHardLinkW (Address: 0x1800b75e0)
CreateMutexExW (Address: 0x1800b7578)
CreateSemaphoreExW (Address: 0x1800b7580)
CreateThreadpoolTimer (Address: 0x1800b7528)
DebugBreak (Address: 0x1800b7488)
DelayLoadFailureHook (Address: 0x1800b7840)
DeleteCriticalSection (Address: 0x1800b7510)
DeleteFileW (Address: 0x1800b7560)
DeviceIoControl (Address: 0x1800b7648)
EncodePointer (Address: 0x1800b7820)
EnterCriticalSection (Address: 0x1800b7500)
EnumResourceLanguagesExW (Address: 0x1800b7868)
ExitProcess (Address: 0x1800b7708)
ExpandEnvironmentStringsW (Address: 0x1800b7880)
FindClose (Address: 0x1800b75e8)
FindFirstFileExW (Address: 0x1800b75d0)
FindFirstFileW (Address: 0x1800b7618)
FindNextFileW (Address: 0x1800b75d8)
FindResourceExW (Address: 0x1800b7858)
FlsAlloc (Address: 0x1800b7738)
FlsFree (Address: 0x1800b7750)
FlsGetValue (Address: 0x1800b7740)
FlsSetValue (Address: 0x1800b7748)
FlushFileBuffers (Address: 0x1800b7878)
FormatMessageW (Address: 0x1800b7450)
FreeEnvironmentStringsW (Address: 0x1800b7670)
FreeLibrary (Address: 0x1800b7448)
GetACP (Address: 0x1800b7720)
GetCommandLineA (Address: 0x1800b7838)
GetCommandLineW (Address: 0x1800b7830)
GetCompressedFileSizeW (Address: 0x1800b7598)
GetConsoleMode (Address: 0x1800b7798)
GetConsoleOutputCP (Address: 0x1800b7790)
GetCPInfo (Address: 0x1800b7730)
GetCurrentProcess (Address: 0x1800b75b8)
GetCurrentProcessId (Address: 0x1800b7570)
GetCurrentThreadId (Address: 0x1800b7458)
GetDiskFreeSpaceW (Address: 0x1800b7590)
GetEnvironmentStringsW (Address: 0x1800b7828)
GetEnvironmentVariableW (Address: 0x1800b7628)
GetErrorMode (Address: 0x1800b7548)
GetFileAttributesExW (Address: 0x1800b7658)
GetFileAttributesW (Address: 0x1800b7530)
GetFileSizeEx (Address: 0x1800b7600)
GetFileType (Address: 0x1800b7770)
GetLastError (Address: 0x1800b7660)
GetLocalTime (Address: 0x1800b76d0)
GetModuleFileNameA (Address: 0x1800b7480)
GetModuleFileNameW (Address: 0x1800b7678)
GetModuleHandleExW (Address: 0x1800b7428)
GetModuleHandleW (Address: 0x1800b7470)
GetOEMCP (Address: 0x1800b7728)
GetProcAddress (Address: 0x1800b7438)
GetProcessHeap (Address: 0x1800b7460)
GetStartupInfoW (Address: 0x1800b7778)
GetStdHandle (Address: 0x1800b7768)
GetStringTypeW (Address: 0x1800b7710)
GetSystemTime (Address: 0x1800b7638)
GetSystemTimeAsFileTime (Address: 0x1800b75c8)
GetSystemWindowsDirectoryW (Address: 0x1800b7558)
GetTempPathW (Address: 0x1800b76a8)
GetWindowsDirectoryW (Address: 0x1800b76b0)
HeapAlloc (Address: 0x1800b7468)
HeapFree (Address: 0x1800b7478)
HeapReAlloc (Address: 0x1800b77c8)
HeapSize (Address: 0x1800b77c0)
InitializeCriticalSectionAndSpinCount (Address: 0x1800b77d0)
InitializeCriticalSectionEx (Address: 0x1800b7508)
InitializeSListHead (Address: 0x1800b77f8)
InitOnceBeginInitialize (Address: 0x1800b7690)
InitOnceComplete (Address: 0x1800b7698)
InterlockedFlushSList (Address: 0x1800b7808)
IsDebuggerPresent (Address: 0x1800b7490)
IsProcessorFeaturePresent (Address: 0x1800b7700)
IsValidCodePage (Address: 0x1800b7718)
LCMapStringW (Address: 0x1800b7760)
LeaveCriticalSection (Address: 0x1800b7588)
LoadLibraryExA (Address: 0x1800b7848)
LoadLibraryExW (Address: 0x1800b7430)
LoadLibraryW (Address: 0x1800b7630)
LoadResource (Address: 0x1800b7850)
LocalAlloc (Address: 0x1800b76a0)
LocalFree (Address: 0x1800b7688)
LockResource (Address: 0x1800b7860)
lstrcmpiW (Address: 0x1800b76b8)
lstrcmpW (Address: 0x1800b76c8)
MoveFileExW (Address: 0x1800b75a0)
MultiByteToWideChar (Address: 0x1800b7608)
OpenSemaphoreW (Address: 0x1800b7520)
OutputDebugStringA (Address: 0x1800b7620)
OutputDebugStringW (Address: 0x1800b7498)
PrivCopyFileExW (Address: 0x1800b7640)
QueryPerformanceCounter (Address: 0x1800b77f0)
RaiseException (Address: 0x1800b7818)
ReadConsoleW (Address: 0x1800b77a8)
ReadFile (Address: 0x1800b75f8)
ReleaseMutex (Address: 0x1800b74d8)
ReleaseSemaphore (Address: 0x1800b74d0)
ReleaseSRWLockExclusive (Address: 0x1800b74a8)
ReleaseSRWLockShared (Address: 0x1800b74b8)
RemoveDirectoryW (Address: 0x1800b7568)
ResetEvent (Address: 0x1800b77e0)
RtlCaptureContext (Address: 0x1800b76d8)
RtlLookupFunctionEntry (Address: 0x1800b76e0)
RtlPcToFileHeader (Address: 0x1800b7810)
RtlUnwindEx (Address: 0x1800b7800)
RtlVirtualUnwind (Address: 0x1800b76e8)
SetCurrentDirectoryW (Address: 0x1800b76c0)
SetEndOfFile (Address: 0x1800b77a0)
SetEnvironmentVariableW (Address: 0x1800b7440)
SetErrorMode (Address: 0x1800b7550)
SetEvent (Address: 0x1800b77d8)
SetFilePointer (Address: 0x1800b7650)
SetFilePointerEx (Address: 0x1800b77b0)
SetLastError (Address: 0x1800b74c0)
SetStdHandle (Address: 0x1800b7780)
SetThreadpoolTimer (Address: 0x1800b74e0)
SetUnhandledExceptionFilter (Address: 0x1800b76f8)
SizeofResource (Address: 0x1800b7870)
Sleep (Address: 0x1800b75c0)
TerminateProcess (Address: 0x1800b7680)
UnhandledExceptionFilter (Address: 0x1800b76f0)
VirtualProtect (Address: 0x1800b7758)
WaitForSingleObject (Address: 0x1800b7518)
WaitForSingleObjectEx (Address: 0x1800b74f8)
WaitForThreadpoolTimerCallbacks (Address: 0x1800b74e8)
WideCharToMultiByte (Address: 0x1800b75f0)
WriteConsoleW (Address: 0x1800b77b8)
WriteFile (Address: 0x1800b7788)

ntdll.dll

DbgPrint (Address: 0x1800b79b0)
DbgPrintEx (Address: 0x1800b78e8)
LdrGetDllHandleEx (Address: 0x1800b79a8)
LdrGetProcedureAddress (Address: 0x1800b7988)
LdrUnloadDll (Address: 0x1800b79a0)
NtAdjustPrivilegesToken (Address: 0x1800b7908)
NtClose (Address: 0x1800b7a50)
NtCreateFile (Address: 0x1800b7a98)
NtDelayExecution (Address: 0x1800b7900)
NtDuplicateToken (Address: 0x1800b7940)
NtFlushKey (Address: 0x1800b7a68)
NtFsControlFile (Address: 0x1800b7890)
NtLoadKey2 (Address: 0x1800b7958)
NtOpenFile (Address: 0x1800b7a10)
NtOpenKey (Address: 0x1800b7998)
NtOpenKeyEx (Address: 0x1800b7a90)
NtOpenProcessToken (Address: 0x1800b7920)
NtOpenThreadToken (Address: 0x1800b7960)
NtPrivilegeCheck (Address: 0x1800b7968)
NtQueryDirectoryFile (Address: 0x1800b7a00)
NtQueryInformationFile (Address: 0x1800b78a8)
NtQueryObject (Address: 0x1800b78b8)
NtQueryPerformanceCounter (Address: 0x1800b7898)
NtQueryValueKey (Address: 0x1800b79b8)
NtReadFile (Address: 0x1800b79e0)
NtSetInformationThread (Address: 0x1800b78c0)
NtUnloadKey2 (Address: 0x1800b7a58)
NtWriteFile (Address: 0x1800b7990)
NtYieldExecution (Address: 0x1800b78c8)
RtlAdjustPrivilege (Address: 0x1800b7a40)
RtlAllocateAndInitializeSid (Address: 0x1800b7950)
RtlAllocateHeap (Address: 0x1800b7a88)
RtlCopyMappedMemory (Address: 0x1800b79f0)
RtlCopyUnicodeString (Address: 0x1800b7ab0)
RtlCreateSecurityDescriptor (Address: 0x1800b7978)
RtlCreateServiceSid (Address: 0x1800b7a20)
RtlCreateUnicodeString (Address: 0x1800b7a38)
RtlCreateUnicodeStringFromAsciiz (Address: 0x1800b79c0)
RtlDeleteCriticalSection (Address: 0x1800b7a70)
RtlDosPathNameToNtPathName_U (Address: 0x1800b78a0)
RtlDowncaseUnicodeChar (Address: 0x1800b78e0)
RtlEnterCriticalSection (Address: 0x1800b7a48)
RtlEqualSid (Address: 0x1800b7a28)
RtlFormatCurrentUserKeyPath (Address: 0x1800b78d0)
RtlFreeHeap (Address: 0x1800b7a78)
RtlFreeUnicodeString (Address: 0x1800b79d8)
RtlGetControlSecurityDescriptor (Address: 0x1800b7930)
RtlHashUnicodeString (Address: 0x1800b7aa8)
RtlInitializeCriticalSection (Address: 0x1800b7ac0)
RtlInitUnicodeString (Address: 0x1800b78b0)
RtlLeaveCriticalSection (Address: 0x1800b7aa0)
RtlLengthSecurityDescriptor (Address: 0x1800b7918)
RtlMakeSelfRelativeSD (Address: 0x1800b7938)
RtlMapGenericMask (Address: 0x1800b7a18)
RtlNtStatusToDosError (Address: 0x1800b7a30)
RtlNtStatusToDosErrorNoTeb (Address: 0x1800b78f8)
RtlQueryEnvironmentVariable_U (Address: 0x1800b7a60)
RtlRaiseStatus (Address: 0x1800b7a80)
RtlReAllocateHeap (Address: 0x1800b78f0)
RtlSetControlSecurityDescriptor (Address: 0x1800b7ab8)
RtlSetDaclSecurityDescriptor (Address: 0x1800b7948)
RtlSetGroupSecurityDescriptor (Address: 0x1800b7970)
RtlSetOwnerSecurityDescriptor (Address: 0x1800b7928)
RtlSetSaclSecurityDescriptor (Address: 0x1800b7910)
RtlTimeToTimeFields (Address: 0x1800b7980)
RtlUpcaseUnicodeChar (Address: 0x1800b78d8)
ZwClose (Address: 0x1800b7a08)
ZwCreateSection (Address: 0x1800b79d0)
ZwMapViewOfSection (Address: 0x1800b79e8)
ZwQueryInformationFile (Address: 0x1800b79f8)
ZwUnmapViewOfSection (Address: 0x1800b79c8)