basesrv.dll

v10.0.19041.3636 64-bit Windows NT Analyzed
Download
Description
Windows NT BASE API Server DLL
Authors
© Microsoft Corporation. All rights reserved.
File size
70.5 KB
Uploaded
2025-12-01 07:23
Views
162
SHA-256
d32eca1083847bfec6a8aee93f4fe3a0

Exported functions 6

BaseGetProcessCrtlRoutine #1 · 0x4a20
BaseSetProcessCreateNotify #2 · 0x4a70
BaseSrvNlsLogon #3 · 0x1010
BaseSrvNlsUpdateRegistryCache #4 · 0x4960
BaseSrvRegisterSxS #5 · 0x4a50
ServerDllInitialization #6 · 0x1810

Imported DLLs & functions 131

CSRSRV.dll 10
CsrCreateProcess 0x18000eab8
CsrCreateThread 0x18000eaa8
CsrImpersonateClient 0x18000ead0
CsrIsClientSandboxed 0x18000eac0
CsrLockProcessByClientId 0x18000eab0
CsrLockThreadByClientId 0x18000ea98
CsrRevertToSelf 0x18000eac8
CsrUnlockProcess 0x18000eaa0
CsrUnlockThread 0x18000ea90
CsrValidateMessageBuffer 0x18000ead8
ntdll.dll 121
__C_specific_handler 0x18000ee30
_snwprintf_s 0x18000ebb8
_vsnwprintf 0x18000eaf0
_wcsicmp 0x18000eb30
_wcsnicmp 0x18000ebe0
DbgPrint 0x18000ed48
LdrDisableThreadCalloutsForDll 0x18000edb0
LdrGetDllHandle 0x18000ec40
LdrGetProcedureAddress 0x18000ec50
LdrLoadDll 0x18000ec88
LdrUnloadDll 0x18000ec90
memcpy 0x18000eea0
memmove 0x18000ede0
memset 0x18000eea8
NtClose 0x18000eb38
NtCompareTokens 0x18000ed30
NtCreateDirectoryObject 0x18000eb58
NtCreateEvent 0x18000ed40
NtCreateFile 0x18000eb90
NtCreateKey 0x18000ed60
NtCreateSymbolicLinkObject 0x18000eb68
NtCreateUserProcess 0x18000ecf0
NtDuplicateObject 0x18000ecc8
NtDuplicateToken 0x18000eca0
NtEnumerateKey 0x18000ed78
NtEnumerateValueKey 0x18000ed88
NtMakePermanentObject 0x18000ec08
NtMakeTemporaryObject 0x18000ebd8
NtNotifyChangeKey 0x18000ed68
NtOpenKey 0x18000eb20
NtOpenProcess 0x18000ecb8
NtOpenProcessToken 0x18000ec98
NtOpenSymbolicLinkObject 0x18000ebc0
NtOpenThread 0x18000ecc0
NtOpenThreadToken 0x18000ed38
NtQueryInformationProcess 0x18000eb70
NtQueryInformationToken 0x18000ec70
NtQueryMultipleValueKey 0x18000ee98
NtQueryObject 0x18000ee28
NtQuerySymbolicLinkObject 0x18000ebd0
NtQuerySystemInformation 0x18000eb00
NtQueryValueKey 0x18000eb28
NtResetEvent 0x18000ed28
NtResumeThread 0x18000ed08
NtSetEvent 0x18000ecd8
NtSetInformationObject 0x18000eb60
NtSetInformationProcess 0x18000ecb0
NtSetInformationThread 0x18000eca8
NtTerminateProcess 0x18000edb8
NtVdmControl 0x18000ed58
NtWaitForSingleObject 0x18000ed10
RtlAcquireSRWLockExclusive 0x18000ec38
RtlAddAccessAllowedAce 0x18000ec00
RtlAddAccessAllowedAceEx 0x18000ec28
RtlAddMandatoryAce 0x18000ec30
RtlAllocateAndInitializeSid 0x18000ebe8
RtlAllocateHeap 0x18000eaf8
RtlAnsiStringToUnicodeString 0x18000ed20
RtlAppendStringToString 0x18000ed00
RtlAppendUnicodeStringToString 0x18000eb88
RtlAppendUnicodeToString 0x18000eb80
RtlCaptureContext 0x18000edc0
RtlCheckTokenMembershipEx 0x18000eda8
RtlCompareUnicodeString 0x18000ece0
RtlConvertSidToUnicodeString 0x18000ee40
RtlCopyLuid 0x18000ec10
RtlCopySid 0x18000ed70
RtlCopyUnicodeString 0x18000ecd0
RtlCreateAcl 0x18000ebf8
RtlCreateProcessParametersEx 0x18000ece8
RtlCreateSecurityDescriptor 0x18000eb40
RtlCreateTagHeap 0x18000ee08
RtlCreateUnicodeString 0x18000edf0
RtlCreateUserThread 0x18000ec78
RtlDeleteCriticalSection 0x18000eba0
RtlDestroyProcessParameters 0x18000ecf8
RtlEnterCriticalSection 0x18000eba8
RtlEqualSid 0x18000ed50
RtlEqualUnicodeString 0x18000ed80
RtlExitUserThread 0x18000ec80
RtlExpandEnvironmentStrings_U 0x18000edf8
RtlFreeHeap 0x18000eb98
RtlFreeSid 0x18000ebf0
RtlFreeUnicodeString 0x18000ee48
RtlGetAce 0x18000ee20
RtlGetCurrentServiceSessionId 0x18000ee10
RtlGetPersistedStateLocation 0x18000ee50
RtlInitAnsiString 0x18000ed18
RtlInitializeCriticalSection 0x18000ee00
RtlInitializeCriticalSectionAndSpinCount 0x18000eb78
RtlInitializeSidEx 0x18000eda0
RtlInitString 0x18000ec48
RtlInitUnicodeString 0x18000ee18
RtlInitUnicodeStringEx 0x18000eb18
RtlIsMultiSessionSku 0x18000ee70
RtlIsMultiUsersInSessionSku 0x18000ee68
RtlLeaveCriticalSection 0x18000ec18
RtlLengthSid 0x18000ec20
RtlLockHeap 0x18000ed90
RtlLookupFunctionEntry 0x18000edc8
RtlOpenCurrentUser 0x18000ee80
RtlPrefixUnicodeString 0x18000ec68
RtlQueryRegistryValuesEx 0x18000eb08
RtlReleaseSRWLockExclusive 0x18000ec58
RtlSetDaclSecurityDescriptor 0x18000eb48
RtlSetSaclSecurityDescriptor 0x18000eb50
RtlSubAuthorityCountSid 0x18000ee58
RtlSubAuthoritySid 0x18000ee38
RtlUnhandledExceptionFilter 0x18000edd8
RtlUnlockHeap 0x18000ed98
RtlUpcaseUnicodeChar 0x18000ebb0
RtlVirtualUnwind 0x18000edd0
swprintf_s 0x18000eae8
wcscat_s 0x18000ede8
wcscpy_s 0x18000ec60
wcsncpy_s 0x18000eb10
wcsnlen 0x18000ebc8
ZwClose 0x18000ee88
ZwOpenKey 0x18000ee90
ZwQueryInformationToken 0x18000ee60
ZwQueryValueKey 0x18000ee78