regsvc.dll

Description: Remote Registry Service

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6093

Architecture: 64-bit

Operating System: Windows NT

SHA256: 6ea95f4ae5bedd77fa29277ebbeb2521

File Size: 168.0 KB

Uploaded At: Dec. 1, 2025, 7:37 a.m.

Views: 6

Exported Functions

  • ServiceMain (Ordinal: 1, Address: 0x3e20)
  • SvchostPushServiceGlobals (Ordinal: 2, Address: 0x4070)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x180021628)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180021638)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180021648)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180021658)
  • RaiseException (Address: 0x180021680)
  • SetErrorMode (Address: 0x180021668)
  • SetLastError (Address: 0x180021660)
  • SetUnhandledExceptionFilter (Address: 0x180021670)
  • UnhandledExceptionFilter (Address: 0x180021678)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x1800216c0)
  • DeleteFileW (Address: 0x180021690)
  • FindClose (Address: 0x1800216a0)
  • FindFirstFileExW (Address: 0x1800216b0)
  • FindNextFileW (Address: 0x1800216a8)
  • GetFileSize (Address: 0x1800216b8)
  • GetFileTime (Address: 0x1800216c8)
  • SetFileInformationByHandle (Address: 0x180021698)
api-ms-win-core-file-l2-1-0.dll
  • CopyFileExW (Address: 0x1800216d8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800216e8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1800216f8)
  • LocalFree (Address: 0x180021700)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • DosDateTimeToFileTime (Address: 0x180021710)
  • FileTimeToDosDateTime (Address: 0x180021720)
  • GetComputerNameW (Address: 0x180021718)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FindResourceExW (Address: 0x180021750)
  • FreeLibrary (Address: 0x180021768)
  • GetModuleFileNameW (Address: 0x180021738)
  • GetProcAddress (Address: 0x180021760)
  • LoadLibraryExW (Address: 0x180021758)
  • LoadResource (Address: 0x180021740)
  • LockResource (Address: 0x180021730)
  • SizeofResource (Address: 0x180021748)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x180021780)
  • MapViewOfFile (Address: 0x180021778)
  • UnmapViewOfFile (Address: 0x180021788)
api-ms-win-core-pcw-l1-1-0.dll
  • PcwAddQueryItem (Address: 0x1800217b8)
  • PcwCollectData (Address: 0x1800217a0)
  • PcwCreateNotifier (Address: 0x1800217b0)
  • PcwCreateQuery (Address: 0x1800217d8)
  • PcwEnumerateInstances (Address: 0x1800217d0)
  • PcwRemoveQueryItem (Address: 0x180021798)
  • PcwSendNotification (Address: 0x1800217c8)
  • PcwSendStatelessNotification (Address: 0x1800217c0)
  • PcwSetQueryItemUserData (Address: 0x1800217a8)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800217e8)
  • SearchPathW (Address: 0x1800217f0)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x180021820)
  • GetCurrentProcess (Address: 0x180021828)
  • GetCurrentProcessId (Address: 0x180021810)
  • GetCurrentThread (Address: 0x180021800)
  • GetCurrentThreadId (Address: 0x180021818)
  • TerminateProcess (Address: 0x180021808)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180021838)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180021850)
  • RegGetValueW (Address: 0x180021860)
  • RegOpenKeyExW (Address: 0x180021848)
  • RegSetValueExW (Address: 0x180021858)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x180021870)
api-ms-win-core-synch-l1-1-0.dll
  • CreateEventW (Address: 0x180021888)
  • CreateMutexW (Address: 0x1800218c8)
  • DeleteCriticalSection (Address: 0x1800218a0)
  • EnterCriticalSection (Address: 0x1800218b0)
  • InitializeCriticalSection (Address: 0x1800218a8)
  • LeaveCriticalSection (Address: 0x180021890)
  • ReleaseMutex (Address: 0x1800218c0)
  • ResetEvent (Address: 0x180021898)
  • SetEvent (Address: 0x1800218b8)
  • WaitForSingleObject (Address: 0x180021880)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1800218d8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x1800218f8)
  • GetSystemTime (Address: 0x1800218f0)
  • GetSystemTimeAsFileTime (Address: 0x1800218e8)
  • GetSystemWindowsDirectoryW (Address: 0x180021900)
  • GetTickCount (Address: 0x180021908)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • UnregisterWaitEx (Address: 0x180021918)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x180021930)
  • EventUnregister (Address: 0x180021938)
  • EventWrite (Address: 0x180021928)
api-ms-win-security-base-l1-1-0.dll
  • CreateWellKnownSid (Address: 0x180021948)
  • InitializeSecurityDescriptor (Address: 0x180021950)
  • SetSecurityDescriptorDacl (Address: 0x180021958)
api-ms-win-service-core-l1-1-0.dll
  • RegisterServiceCtrlHandlerExW (Address: 0x180021970)
  • SetServiceStatus (Address: 0x180021968)
msvcrt.dll
  • __C_specific_handler (Address: 0x1800219f0)
  • __CxxFrameHandler3 (Address: 0x180021a08)
  • _amsg_exit (Address: 0x180021a20)
  • _callnewh (Address: 0x180021a10)
  • _initterm (Address: 0x1800219f8)
  • _resetstkoflw (Address: 0x1800219b8)
  • _ultow_s (Address: 0x1800219a8)
  • _vsnwprintf (Address: 0x1800219a0)
  • _wcsnicmp (Address: 0x180021990)
  • _XcptFilter (Address: 0x180021a28)
  • free (Address: 0x180021a18)
  • iswalpha (Address: 0x1800219c0)
  • malloc (Address: 0x180021a00)
  • memcmp (Address: 0x1800219d0)
  • memcpy (Address: 0x1800219d8)
  • memmove (Address: 0x1800219e8)
  • memset (Address: 0x1800219e0)
  • wcschr (Address: 0x1800219b0)
  • wcsncmp (Address: 0x1800219c8)
  • wcsnlen (Address: 0x180021998)
  • wcsrchr (Address: 0x180021988)
  • wcstoul (Address: 0x180021980)
ntdll.dll
  • DbgPrint (Address: 0x180021df0)
  • EtwEventRegister (Address: 0x180021bc0)
  • EtwEventSetInformation (Address: 0x180021bc8)
  • EtwEventUnregister (Address: 0x180021bd8)
  • EtwEventWriteTransfer (Address: 0x180021bf0)
  • EtwGetTraceEnableFlags (Address: 0x180021c18)
  • EtwGetTraceEnableLevel (Address: 0x180021c20)
  • EtwGetTraceLoggerHandle (Address: 0x180021c28)
  • EtwRegisterTraceGuidsW (Address: 0x180021c10)
  • EtwTraceMessage (Address: 0x180021c30)
  • EtwUnregisterTraceGuids (Address: 0x180021c08)
  • LdrGetDllHandle (Address: 0x180021b50)
  • LdrGetProcedureAddress (Address: 0x180021b48)
  • NtAccessCheck (Address: 0x180021ce0)
  • NtClose (Address: 0x180021db0)
  • NtCreateFile (Address: 0x180021c48)
  • NtCreateKey (Address: 0x180021b38)
  • NtCreateMutant (Address: 0x180021b70)
  • NtCreatePrivateNamespace (Address: 0x180021dd0)
  • NtDeleteKey (Address: 0x180021c70)
  • NtDeleteValueKey (Address: 0x180021c80)
  • NtEnumerateKey (Address: 0x180021c78)
  • NtEnumerateValueKey (Address: 0x180021c68)
  • NtFlushKey (Address: 0x180021db8)
  • NtLoadKey (Address: 0x180021ca0)
  • NtOpenFile (Address: 0x180021c40)
  • NtOpenKey (Address: 0x180021bd0)
  • NtOpenKeyEx (Address: 0x180021b28)
  • NtOpenPrivateNamespace (Address: 0x180021b68)
  • NtOpenProcessToken (Address: 0x180021a70)
  • NtOpenThreadToken (Address: 0x180021cd8)
  • NtQueryInformationFile (Address: 0x180021a98)
  • NtQueryInformationThread (Address: 0x180021be8)
  • NtQueryInformationToken (Address: 0x180021a78)
  • NtQueryKey (Address: 0x180021dc8)
  • NtQueryMultipleValueKey (Address: 0x180021cb0)
  • NtQueryPerformanceCounter (Address: 0x180021b88)
  • NtQuerySecurityObject (Address: 0x180021cc8)
  • NtQueryValueKey (Address: 0x180021b80)
  • NtReadFile (Address: 0x180021aa0)
  • NtReplaceKey (Address: 0x180021c88)
  • NtRestoreKey (Address: 0x180021c38)
  • NtSaveKey (Address: 0x180021c58)
  • NtSaveKeyEx (Address: 0x180021c50)
  • NtSetInformationKey (Address: 0x180021b30)
  • NtSetInformationThread (Address: 0x180021d30)
  • NtSetSecurityObject (Address: 0x180021c60)
  • NtSetValueKey (Address: 0x180021b40)
  • NtUnloadKey (Address: 0x180021c90)
  • NtWaitForMultipleObjects (Address: 0x180021a48)
  • NtWaitForSingleObject (Address: 0x180021c00)
  • NtWriteFile (Address: 0x180021a90)
  • RtlAcquireResourceExclusive (Address: 0x180021ce8)
  • RtlAcquireResourceShared (Address: 0x180021d18)
  • RtlAcquireSRWLockExclusive (Address: 0x180021ac0)
  • RtlAcquireSRWLockShared (Address: 0x180021ad8)
  • RtlAddAccessAllowedAce (Address: 0x180021d80)
  • RtlAddAccessAllowedAceEx (Address: 0x180021a80)
  • RtlAddSIDToBoundaryDescriptor (Address: 0x180021a38)
  • RtlAllocateAndInitializeSid (Address: 0x180021d90)
  • RtlAllocateHeap (Address: 0x180021da0)
  • RtlAppendUnicodeStringToString (Address: 0x180021a88)
  • RtlAppendUnicodeToString (Address: 0x180021b20)
  • RtlCaptureContext (Address: 0x180021de8)
  • RtlCompareUnicodeString (Address: 0x180021d50)
  • RtlCopyUnicodeString (Address: 0x180021df8)
  • RtlCreateAcl (Address: 0x180021d68)
  • RtlCreateBoundaryDescriptor (Address: 0x180021a40)
  • RtlCreateSecurityDescriptor (Address: 0x180021d58)
  • RtlDeleteBoundaryDescriptor (Address: 0x180021b78)
  • RtlDeleteCriticalSection (Address: 0x180021ba0)
  • RtlDeleteElementGenericTableAvl (Address: 0x180021af8)
  • RtlDeleteResource (Address: 0x180021d20)
  • RtlDllShutdownInProgress (Address: 0x180021b98)
  • RtlDosPathNameToRelativeNtPathName_U (Address: 0x180021ca8)
  • RtlEnterCriticalSection (Address: 0x180021a58)
  • RtlEnumerateGenericTableAvl (Address: 0x180021af0)
  • RtlFreeHeap (Address: 0x180021d70)
  • RtlFreeSid (Address: 0x180021d78)
  • RtlGetAce (Address: 0x180021d40)
  • RtlGetDaclSecurityDescriptor (Address: 0x180021cc0)
  • RtlGetGroupSecurityDescriptor (Address: 0x180021d00)
  • RtlGetOwnerSecurityDescriptor (Address: 0x180021d28)
  • RtlGetThreadPreferredUILanguages (Address: 0x180021be0)
  • RtlGetVersion (Address: 0x180021bf8)
  • RtlInitializeCriticalSection (Address: 0x180021bb8)
  • RtlInitializeGenericTableAvl (Address: 0x180021b00)
  • RtlInitializeResource (Address: 0x180021cf0)
  • RtlInitString (Address: 0x180021b60)
  • RtlInitUnicodeString (Address: 0x180021cb8)
  • RtlInitUnicodeStringEx (Address: 0x180021cf8)
  • RtlInsertElementGenericTableAvl (Address: 0x180021ac8)
  • RtlIntegerToUnicodeString (Address: 0x180021a68)
  • RtlLeaveCriticalSection (Address: 0x180021a60)
  • RtlLengthRequiredSid (Address: 0x180021d10)
  • RtlLengthSecurityDescriptor (Address: 0x180021b08)
  • RtlLengthSid (Address: 0x180021d88)
  • RtlLookupElementGenericTableAvl (Address: 0x180021ae0)
  • RtlLookupFunctionEntry (Address: 0x180021de0)
  • RtlMakeSelfRelativeSD (Address: 0x180021b10)
  • RtlNtStatusToDosError (Address: 0x180021da8)
  • RtlOpenCurrentUser (Address: 0x180021d60)
  • RtlQueryInformationAcl (Address: 0x180021d38)
  • RtlQueryPerformanceCounter (Address: 0x180021ab8)
  • RtlReleaseRelativeName (Address: 0x180021c98)
  • RtlReleaseResource (Address: 0x180021d08)
  • RtlReleaseSRWLockExclusive (Address: 0x180021ad0)
  • RtlReleaseSRWLockShared (Address: 0x180021ae8)
  • RtlRunOnceBeginInitialize (Address: 0x180021ba8)
  • RtlRunOnceExecuteOnce (Address: 0x180021bb0)
  • RtlRunOnceInitialize (Address: 0x180021b90)
  • RtlSetDaclSecurityDescriptor (Address: 0x180021d98)
  • RtlSetGroupSecurityDescriptor (Address: 0x180021cd0)
  • RtlSetOwnerSecurityDescriptor (Address: 0x180021d48)
  • RtlUnicodeToMultiByteN (Address: 0x180021a50)
  • RtlUpcaseUnicodeChar (Address: 0x180021b58)
  • RtlValidRelativeSecurityDescriptor (Address: 0x180021dc0)
  • RtlValidSecurityDescriptor (Address: 0x180021b18)
  • RtlVirtualUnwind (Address: 0x180021dd8)
  • RtlWaitOnAddress (Address: 0x180021aa8)
  • RtlWakeAddressAll (Address: 0x180021ab0)
RPCRT4.dll
  • NdrClientCall3 (Address: 0x1800215b8)
  • NdrServerCall2 (Address: 0x180021608)
  • NdrServerCallAll (Address: 0x1800215c8)
  • RpcBindingFree (Address: 0x1800215e0)
  • RpcBindingFromStringBindingW (Address: 0x1800215d0)
  • RpcBindingSetAuthInfoExW (Address: 0x1800215c0)
  • RpcImpersonateClient (Address: 0x1800215f0)
  • RpcRaiseException (Address: 0x1800215f8)
  • RpcRevertToSelf (Address: 0x1800215e8)
  • RpcServerInqCallAttributesW (Address: 0x1800215a0)
  • RpcServerInterfaceGroupActivate (Address: 0x180021600)
  • RpcServerInterfaceGroupClose (Address: 0x180021610)
  • RpcServerInterfaceGroupCreateW (Address: 0x1800215b0)
  • RpcServerInterfaceGroupDeactivate (Address: 0x1800215a8)
  • RpcServerRegisterAuthInfoW (Address: 0x180021618)
  • RpcStringBindingComposeW (Address: 0x1800215d8)
  • RpcStringFreeW (Address: 0x180021598)