kerberos.dll
Description: Kerberos Security Package
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6328
Architecture: 32-bit
Operating System: Windows NT
SHA256: 671268c7d8e2a5c0aac67eb7cce35328
File Size: 818.0 KB
Uploaded At: Dec. 1, 2025, 7:59 a.m.
Views: 19
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- SpInitialize (Ordinal: 1, Address: 0x23aa0)
- KerbDomainChangeCallback (Ordinal: 2, Address: 0x45cb0)
- SpLsaModeInitialize (Ordinal: 3, Address: 0x22770)
- SpUserModeInitialize (Ordinal: 4, Address: 0x28610)
- DllMain (Ordinal: 5, Address: 0x2b220)
- KerbCreateTokenFromTicketForKdc (Ordinal: 6, Address: 0x2e0e0)
- KerbIsInitialized (Ordinal: 7, Address: 0x47860)
- KerbKdcCallBack (Ordinal: 8, Address: 0x47870)
- KerbMakeKdcCall (Ordinal: 9, Address: 0x5db60)
- Kerberos (Ordinal: 10, Address: 0xd690)
- SpInstanceInit (Ordinal: 32, Address: 0x28770)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x45abe0d0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x45abe0dc)
- IsDebuggerPresent (Address: 0x45abe0e4)
- OutputDebugStringA (Address: 0x45abe0d8)
- OutputDebugStringW (Address: 0x45abe0e0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x45abe0f0)
- RaiseException (Address: 0x45abe0f4)
- SetLastError (Address: 0x45abe0f8)
- SetUnhandledExceptionFilter (Address: 0x45abe0fc)
- UnhandledExceptionFilter (Address: 0x45abe0ec)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x45abe108)
- FileTimeToLocalFileTime (Address: 0x45abe104)
api-ms-win-core-file-l2-1-0.dll
- MoveFileExW (Address: 0x45abe110)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x45abe118)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x45abe124)
- HeapAlloc (Address: 0x45abe120)
- HeapFree (Address: 0x45abe128)
api-ms-win-core-heap-l2-1-0.dll
- GlobalFree (Address: 0x45abe130)
- LocalAlloc (Address: 0x45abe134)
- LocalFree (Address: 0x45abe138)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x45abe140)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x45abe164)
- FreeLibrary (Address: 0x45abe148)
- GetModuleFileNameA (Address: 0x45abe160)
- GetModuleFileNameW (Address: 0x45abe150)
- GetModuleHandleExW (Address: 0x45abe158)
- GetModuleHandleW (Address: 0x45abe14c)
- GetProcAddress (Address: 0x45abe15c)
- LoadLibraryExA (Address: 0x45abe154)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x45abe16c)
- GetACP (Address: 0x45abe170)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x45abe190)
- MapViewOfFileEx (Address: 0x45abe18c)
- OpenFileMappingW (Address: 0x45abe180)
- UnmapViewOfFile (Address: 0x45abe184)
- VirtualAlloc (Address: 0x45abe17c)
- VirtualProtect (Address: 0x45abe188)
- VirtualQuery (Address: 0x45abe178)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x45abe198)
- GetCurrentDirectoryW (Address: 0x45abe1a0)
- GetEnvironmentVariableW (Address: 0x45abe19c)
- SetCurrentDirectoryW (Address: 0x45abe1a4)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x45abe1b0)
- GetCurrentProcessId (Address: 0x45abe1c0)
- GetCurrentThreadId (Address: 0x45abe1b8)
- SetThreadStackGuarantee (Address: 0x45abe1ac)
- SetThreadToken (Address: 0x45abe1bc)
- TerminateProcess (Address: 0x45abe1b4)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x45abe1c8)
- OpenProcess (Address: 0x45abe1cc)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x45abe1d4)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x45abe1dc)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x45abe1e4)
- RegCreateKeyExW (Address: 0x45abe1f4)
- RegEnumKeyExW (Address: 0x45abe1f8)
- RegEnumValueW (Address: 0x45abe1f0)
- RegNotifyChangeKeyValue (Address: 0x45abe1ec)
- RegOpenKeyExW (Address: 0x45abe1e8)
- RegQueryInfoKeyW (Address: 0x45abe204)
- RegQueryValueExW (Address: 0x45abe200)
- RegSetValueExW (Address: 0x45abe1fc)
api-ms-win-core-rtlsupport-l1-2-0.dll
- RtlCompareMemory (Address: 0x45abe20c)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x45abe214)
- WideCharToMultiByte (Address: 0x45abe218)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiA (Address: 0x45abe22c)
- lstrcmpW (Address: 0x45abe220)
- lstrlenA (Address: 0x45abe224)
- lstrlenW (Address: 0x45abe228)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x45abe260)
- AcquireSRWLockShared (Address: 0x45abe258)
- CreateEventW (Address: 0x45abe27c)
- CreateMutexExW (Address: 0x45abe248)
- CreateSemaphoreExW (Address: 0x45abe254)
- DeleteCriticalSection (Address: 0x45abe23c)
- EnterCriticalSection (Address: 0x45abe238)
- InitializeCriticalSection (Address: 0x45abe270)
- InitializeCriticalSectionEx (Address: 0x45abe240)
- InitializeSRWLock (Address: 0x45abe284)
- LeaveCriticalSection (Address: 0x45abe234)
- OpenEventW (Address: 0x45abe280)
- OpenSemaphoreW (Address: 0x45abe264)
- ReleaseMutex (Address: 0x45abe250)
- ReleaseSemaphore (Address: 0x45abe244)
- ReleaseSRWLockExclusive (Address: 0x45abe25c)
- ReleaseSRWLockShared (Address: 0x45abe24c)
- ResetEvent (Address: 0x45abe278)
- SetEvent (Address: 0x45abe274)
- TryAcquireSRWLockExclusive (Address: 0x45abe288)
- WaitForSingleObject (Address: 0x45abe26c)
- WaitForSingleObjectEx (Address: 0x45abe268)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceExecuteOnce (Address: 0x45abe294)
- Sleep (Address: 0x45abe290)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetComputerNameExW (Address: 0x45abe2a0)
- GetSystemInfo (Address: 0x45abe2b0)
- GetSystemTimeAsFileTime (Address: 0x45abe2a8)
- GetTickCount (Address: 0x45abe29c)
- GetVersionExW (Address: 0x45abe2ac)
- GetWindowsDirectoryW (Address: 0x45abe2a4)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x45abe2c0)
- CreateThreadpoolTimer (Address: 0x45abe2b8)
- SetThreadpoolTimer (Address: 0x45abe2c4)
- WaitForThreadpoolTimerCallbacks (Address: 0x45abe2bc)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- ChangeTimerQueueTimer (Address: 0x45abe2d4)
- CreateTimerQueueTimer (Address: 0x45abe2dc)
- DeleteTimerQueueTimer (Address: 0x45abe2cc)
- QueueUserWorkItem (Address: 0x45abe2d8)
- UnregisterWaitEx (Address: 0x45abe2d0)
api-ms-win-core-threadpool-private-l1-1-0.dll
- RegisterWaitForSingleObjectEx (Address: 0x45abe2e4)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x45abe2ec)
api-ms-win-core-version-l1-1-0.dll
- GetFileVersionInfoExW (Address: 0x45abe2fc)
- GetFileVersionInfoSizeExW (Address: 0x45abe2f4)
- VerQueryValueW (Address: 0x45abe2f8)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x45abe3b4)
- __std_terminate (Address: 0x45abe3b0)
- _CxxThrowException (Address: 0x45abe3c0)
- _except_handler4_common (Address: 0x45abe370)
- _o___std_exception_copy (Address: 0x45abe3ac)
- _o___std_exception_destroy (Address: 0x45abe3a8)
- _o___std_type_info_destroy_list (Address: 0x45abe3a0)
- _o___stdio_common_vsnprintf_s (Address: 0x45abe398)
- _o___stdio_common_vsnwprintf_s (Address: 0x45abe394)
- _o___stdio_common_vsprintf_s (Address: 0x45abe390)
- _o___stdio_common_vsscanf (Address: 0x45abe38c)
- _o___stdio_common_vswprintf (Address: 0x45abe388)
- _o___stdio_common_vswprintf_s (Address: 0x45abe384)
- _o__callnewh (Address: 0x45abe380)
- _o__cexit (Address: 0x45abe37c)
- _o__configure_narrow_argv (Address: 0x45abe378)
- _o__crt_atexit (Address: 0x45abe374)
- _o__errno (Address: 0x45abe3a4)
- _o__execute_onexit_table (Address: 0x45abe39c)
- _o__initialize_narrow_environment (Address: 0x45abe304)
- _o__initialize_onexit_table (Address: 0x45abe308)
- _o__invalid_parameter_noinfo (Address: 0x45abe30c)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x45abe310)
- _o__purecall (Address: 0x45abe314)
- _o__register_onexit_function (Address: 0x45abe318)
- _o__seh_filter_dll (Address: 0x45abe31c)
- _o__stricmp (Address: 0x45abe320)
- _o__ultow (Address: 0x45abe324)
- _o__wcsicmp (Address: 0x45abe328)
- _o__wcsnicmp (Address: 0x45abe32c)
- _o__wsplitpath_s (Address: 0x45abe334)
- _o_ceil (Address: 0x45abe338)
- _o_free (Address: 0x45abe33c)
- _o_malloc (Address: 0x45abe340)
- _o_qsort (Address: 0x45abe344)
- _o_strcpy_s (Address: 0x45abe348)
- _o_toupper (Address: 0x45abe34c)
- _o_towlower (Address: 0x45abe350)
- _o_wcscat_s (Address: 0x45abe354)
- _o_wcscpy_s (Address: 0x45abe358)
- _o_wcsncpy_s (Address: 0x45abe35c)
- _o_wcstok (Address: 0x45abe360)
- _o_wcstok_s (Address: 0x45abe364)
- _o_wcstol (Address: 0x45abe368)
- _o_wcstoul (Address: 0x45abe36c)
- memcmp (Address: 0x45abe3b8)
- memcpy (Address: 0x45abe3bc)
- memmove (Address: 0x45abe330)
- wcschr (Address: 0x45abe3c8)
- wcsrchr (Address: 0x45abe3c4)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x45abe3d4)
- _initterm_e (Address: 0x45abe3d0)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x45abe3e0)
- wcsncmp (Address: 0x45abe3dc)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- GetTraceEnableFlags (Address: 0x45abe3e8)
- GetTraceEnableLevel (Address: 0x45abe3f4)
- GetTraceLoggerHandle (Address: 0x45abe3f0)
- RegisterTraceGuidsW (Address: 0x45abe3f8)
- TraceMessage (Address: 0x45abe3fc)
- UnregisterTraceGuids (Address: 0x45abe3ec)
api-ms-win-eventing-controller-l1-1-0.dll
- ControlTraceW (Address: 0x45abe404)
- EnableTraceEx2 (Address: 0x45abe40c)
- StartTraceW (Address: 0x45abe408)
api-ms-win-eventing-provider-l1-1-0.dll
- EventProviderEnabled (Address: 0x45abe414)
- EventRegister (Address: 0x45abe424)
- EventSetInformation (Address: 0x45abe418)
- EventUnregister (Address: 0x45abe420)
- EventWriteTransfer (Address: 0x45abe41c)
api-ms-win-security-activedirectoryclient-l1-1-0.dll
- DsBindWithSpnExW (Address: 0x45abe430)
- DsCrackNamesW (Address: 0x45abe438)
- DsFreeNameResultW (Address: 0x45abe42c)
- DsUnBindW (Address: 0x45abe434)
api-ms-win-security-base-l1-1-0.dll
- AdjustTokenPrivileges (Address: 0x45abe44c)
- AllocateAndInitializeSid (Address: 0x45abe45c)
- CheckTokenMembership (Address: 0x45abe444)
- EqualSid (Address: 0x45abe450)
- FreeSid (Address: 0x45abe448)
- GetTokenInformation (Address: 0x45abe440)
- IsTokenRestricted (Address: 0x45abe458)
- RevertToSelf (Address: 0x45abe454)
api-ms-win-service-private-l1-1-0.dll
- I_QueryTagInformation (Address: 0x45abe464)
MSASN1.dll
- ASN1_CloseDecoder (Address: 0x45abe000)
- ASN1_CloseEncoder (Address: 0x45abe010)
- ASN1_CreateDecoder (Address: 0x45abe0bc)
- ASN1_CreateEncoder (Address: 0x45abe0c8)
- ASN1_CreateModule (Address: 0x45abe028)
- ASN1_Decode (Address: 0x45abe0c4)
- ASN1_Encode (Address: 0x45abe014)
- ASN1_FreeDecoded (Address: 0x45abe018)
- ASN1_FreeEncoded (Address: 0x45abe0b4)
- ASN1BERDecBitString (Address: 0x45abe040)
- ASN1BERDecBool (Address: 0x45abe07c)
- ASN1BERDecCharString (Address: 0x45abe024)
- ASN1BERDecEndOfContents (Address: 0x45abe080)
- ASN1BERDecExplicitTag (Address: 0x45abe0a0)
- ASN1BERDecGeneralizedTime (Address: 0x45abe098)
- ASN1BERDecNotEndOfContents (Address: 0x45abe088)
- ASN1BERDecObjectIdentifier (Address: 0x45abe03c)
- ASN1BERDecOctetString (Address: 0x45abe08c)
- ASN1BERDecOpenType2 (Address: 0x45abe0b0)
- ASN1BERDecPeekTag (Address: 0x45abe094)
- ASN1BERDecS32Val (Address: 0x45abe04c)
- ASN1BERDecSkip (Address: 0x45abe060)
- ASN1BERDecSXVal (Address: 0x45abe0ac)
- ASN1BERDecU32Val (Address: 0x45abe02c)
- ASN1BERDecZeroCharString (Address: 0x45abe034)
- ASN1BEREncBool (Address: 0x45abe064)
- ASN1BEREncEndOfContents (Address: 0x45abe068)
- ASN1BEREncExplicitTag (Address: 0x45abe084)
- ASN1BEREncObjectIdentifier (Address: 0x45abe038)
- ASN1BEREncOpenType (Address: 0x45abe050)
- ASN1BEREncS32 (Address: 0x45abe070)
- ASN1BEREncSX (Address: 0x45abe054)
- ASN1BEREncU32 (Address: 0x45abe090)
- ASN1bitstring_free (Address: 0x45abe020)
- ASN1charstring_free (Address: 0x45abe044)
- ASN1DecAlloc (Address: 0x45abe058)
- ASN1DecSetError (Address: 0x45abe0a4)
- ASN1DEREncBitString (Address: 0x45abe030)
- ASN1DEREncCharString (Address: 0x45abe06c)
- ASN1DEREncGeneralizedTime (Address: 0x45abe09c)
- ASN1DEREncOctetString (Address: 0x45abe048)
- ASN1EncSetError (Address: 0x45abe074)
- ASN1Free (Address: 0x45abe05c)
- ASN1intx_free (Address: 0x45abe0b8)
- ASN1intx_setuint32 (Address: 0x45abe0c0)
- ASN1intx2int32 (Address: 0x45abe00c)
- ASN1intx2uint32 (Address: 0x45abe008)
- ASN1intxisuint32 (Address: 0x45abe004)
- ASN1objectidentifier_free (Address: 0x45abe078)
- ASN1octetstring_free (Address: 0x45abe0a8)
- ASN1ztcharstring_free (Address: 0x45abe01c)
msvcp_win.dll
- ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z (Address: 0x45abe4e4)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x45abe494)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x45abe4ac)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x45abe490)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x45abe4f0)
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x45abe4f4)
- ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x45abe4ec)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x45abe4d0)
- ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x45abe4a8)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x45abe4d8)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x45abe4a4)
- ??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x45abe470)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x45abe498)
- ??Bios_base@std@@QBE_NXZ (Address: 0x45abe46c)
- ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x45abe4cc)
- ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x45abe4c0)
- ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x45abe4b4)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z (Address: 0x45abe4bc)
- ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x45abe4c8)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x45abe474)
- ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x45abe4c4)
- ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x45abe49c)
- ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x45abe4e0)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z (Address: 0x45abe47c)
- ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z (Address: 0x45abe4b8)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z (Address: 0x45abe4d4)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z (Address: 0x45abe4b0)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z (Address: 0x45abe4a0)
- ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x45abe4dc)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ (Address: 0x45abe48c)
- ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x45abe4e8)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ (Address: 0x45abe478)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ (Address: 0x45abe488)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z (Address: 0x45abe484)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z (Address: 0x45abe480)
ntdll.dll
- EtwEventActivityIdControl (Address: 0x45abe63c)
- EtwEventRegister (Address: 0x45abe66c)
- EtwEventUnregister (Address: 0x45abe668)
- EtwEventWriteTransfer (Address: 0x45abe638)
- EtwGetTraceLoggerHandle (Address: 0x45abe540)
- EtwLogTraceEvent (Address: 0x45abe554)
- EtwRegisterTraceGuidsW (Address: 0x45abe544)
- EtwTraceMessage (Address: 0x45abe5e8)
- EtwUnregisterTraceGuids (Address: 0x45abe530)
- NtAllocateLocallyUniqueId (Address: 0x45abe5e0)
- NtClose (Address: 0x45abe5c8)
- NtCreateEvent (Address: 0x45abe5d8)
- NtDuplicateObject (Address: 0x45abe65c)
- NtDuplicateToken (Address: 0x45abe640)
- NtOpenEvent (Address: 0x45abe5d0)
- NtOpenProcess (Address: 0x45abe564)
- NtOpenProcessToken (Address: 0x45abe62c)
- NtOpenThreadToken (Address: 0x45abe634)
- NtQueryInformationToken (Address: 0x45abe658)
- NtQuerySystemInformation (Address: 0x45abe664)
- NtQuerySystemTime (Address: 0x45abe5a4)
- NtSetEvent (Address: 0x45abe52c)
- NtSetInformationThread (Address: 0x45abe51c)
- NtSetSecurityObject (Address: 0x45abe618)
- NtWaitForSingleObject (Address: 0x45abe5cc)
- RtlAcquireResourceExclusive (Address: 0x45abe608)
- RtlAcquireResourceShared (Address: 0x45abe5fc)
- RtlAddAccessAllowedAce (Address: 0x45abe624)
- RtlAllocateAndInitializeSid (Address: 0x45abe630)
- RtlAllocateHeap (Address: 0x45abe538)
- RtlAnsiStringToUnicodeString (Address: 0x45abe550)
- RtlAppendUnicodeStringToString (Address: 0x45abe570)
- RtlAvlInsertNodeEx (Address: 0x45abe568)
- RtlAvlRemoveNode (Address: 0x45abe56c)
- RtlCompareUnicodeString (Address: 0x45abe584)
- RtlConvertSharedToExclusive (Address: 0x45abe5f4)
- RtlCopyLuid (Address: 0x45abe560)
- RtlCopySid (Address: 0x45abe644)
- RtlCopyUnicodeString (Address: 0x45abe55c)
- RtlCreateAcl (Address: 0x45abe628)
- RtlCreateSecurityDescriptor (Address: 0x45abe620)
- RtlCreateTimer (Address: 0x45abe610)
- RtlCreateTimerQueue (Address: 0x45abe614)
- RtlDeleteCriticalSection (Address: 0x45abe670)
- RtlDeleteElementGenericTable (Address: 0x45abe508)
- RtlDeleteElementGenericTableAvl (Address: 0x45abe5f0)
- RtlDeleteResource (Address: 0x45abe5a0)
- RtlDeleteTimerQueue (Address: 0x45abe60c)
- RtlDeleteTimerQueueEx (Address: 0x45abe514)
- RtlDeregisterWait (Address: 0x45abe590)
- RtlDowncaseUnicodeString (Address: 0x45abe5a8)
- RtlDuplicateUnicodeString (Address: 0x45abe548)
- RtlEnterCriticalSection (Address: 0x45abe67c)
- RtlEnumerateGenericTableAvl (Address: 0x45abe5c4)
- RtlEqualComputerName (Address: 0x45abe53c)
- RtlEqualDomainName (Address: 0x45abe5d4)
- RtlEqualSid (Address: 0x45abe648)
- RtlEqualUnicodeString (Address: 0x45abe5b0)
- RtlEraseUnicodeString (Address: 0x45abe54c)
- RtlFreeAnsiString (Address: 0x45abe578)
- RtlFreeHeap (Address: 0x45abe534)
- RtlFreeSid (Address: 0x45abe660)
- RtlFreeUnicodeString (Address: 0x45abe5ec)
- RtlGetElementGenericTable (Address: 0x45abe510)
- RtlImageNtHeader (Address: 0x45abe518)
- RtlInitAnsiString (Address: 0x45abe580)
- RtlInitializeCriticalSection (Address: 0x45abe674)
- RtlInitializeGenericTable (Address: 0x45abe504)
- RtlInitializeGenericTableAvl (Address: 0x45abe594)
- RtlInitializeResource (Address: 0x45abe598)
- RtlInitializeSid (Address: 0x45abe654)
- RtlInitUnicodeString (Address: 0x45abe5dc)
- RtlInitUnicodeStringEx (Address: 0x45abe574)
- RtlInsertElementGenericTable (Address: 0x45abe50c)
- RtlInsertElementGenericTableAvl (Address: 0x45abe604)
- RtlIntegerToUnicodeString (Address: 0x45abe588)
- RtlIpv4AddressToStringExW (Address: 0x45abe5b8)
- RtlIpv4StringToAddressExW (Address: 0x45abe5c0)
- RtlIpv6AddressToStringExW (Address: 0x45abe5b4)
- RtlIpv6StringToAddressExW (Address: 0x45abe5bc)
- RtlLeaveCriticalSection (Address: 0x45abe678)
- RtlLengthRequiredSid (Address: 0x45abe500)
- RtlLengthSid (Address: 0x45abe64c)
- RtlLookupElementGenericTableAvl (Address: 0x45abe5f8)
- RtlNtStatusToDosError (Address: 0x45abe528)
- RtlPrefixUnicodeString (Address: 0x45abe68c)
- RtlRegisterWait (Address: 0x45abe58c)
- RtlReleaseResource (Address: 0x45abe600)
- RtlRunDecodeUnicodeString (Address: 0x45abe558)
- RtlSetDaclSecurityDescriptor (Address: 0x45abe61c)
- RtlSubAuthorityCountSid (Address: 0x45abe4fc)
- RtlSubAuthoritySid (Address: 0x45abe650)
- RtlSystemTimeToLocalTime (Address: 0x45abe5ac)
- RtlTimeFieldsToTime (Address: 0x45abe520)
- RtlTimeToTimeFields (Address: 0x45abe59c)
- RtlUnicodeStringToAnsiString (Address: 0x45abe57c)
- RtlUniform (Address: 0x45abe688)
- RtlUpcaseUnicodeString (Address: 0x45abe690)
- RtlValidateUnicodeString (Address: 0x45abe684)
- RtlValidSid (Address: 0x45abe524)
- WinSqmIncrementDWORD (Address: 0x45abe5e4)
- WinSqmSetDWORD (Address: 0x45abe680)