adamwizard.dll

Description: Active Directory Lightweight Directory Services Installer

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5915

Architecture: 64-bit

Operating System: Windows NT

SHA256: d4807574386abf06e3514f54455fe4bd

File Size: 894.0 KB

Uploaded At: Dec. 1, 2025, 8:12 a.m.

Views: 17

Exported Functions

  • LaunchAdamInstall (Ordinal: 1, Address: 0x57d0)
  • CreateFWExceptions (Ordinal: 2, Address: 0x1bd30)
  • RemoveFWExceptions (Ordinal: 3, Address: 0x1bd40)
  • SCW_DynamicKB_Function (Ordinal: 4, Address: 0x1bd50)

Imported DLLs & Functions

ACTIVEDS.dll
  • (Address: 0x18007a030)
  • (Address: 0x18007a038)
ADVAPI32.dll
  • AdjustTokenPrivileges (Address: 0x18007a0b0)
  • AllocateAndInitializeSid (Address: 0x18007a0b8)
  • BuildTrusteeWithSidW (Address: 0x18007a058)
  • ChangeServiceConfigW (Address: 0x18007a100)
  • CheckTokenMembership (Address: 0x18007a150)
  • CloseServiceHandle (Address: 0x18007a0c0)
  • ConvertSidToStringSidW (Address: 0x18007a060)
  • ConvertStringSidToSidW (Address: 0x18007a0c8)
  • CopySid (Address: 0x18007a078)
  • DecryptFileW (Address: 0x18007a178)
  • FreeSid (Address: 0x18007a0d0)
  • GetLengthSid (Address: 0x18007a070)
  • GetWindowsAccountDomainSid (Address: 0x18007a088)
  • ImpersonateLoggedOnUser (Address: 0x18007a090)
  • InitializeSecurityDescriptor (Address: 0x18007a130)
  • IsValidSecurityDescriptor (Address: 0x18007a068)
  • IsValidSid (Address: 0x18007a190)
  • IsWellKnownSid (Address: 0x18007a048)
  • LogonUserW (Address: 0x18007a050)
  • LookupAccountNameW (Address: 0x18007a080)
  • LookupAccountSidW (Address: 0x18007a0d8)
  • LookupPrivilegeValueW (Address: 0x18007a0e0)
  • LsaAddAccountRights (Address: 0x18007a0e8)
  • LsaClose (Address: 0x18007a198)
  • LsaNtStatusToWinError (Address: 0x18007a1a0)
  • LsaOpenPolicy (Address: 0x18007a1a8)
  • OpenProcessToken (Address: 0x18007a1b8)
  • OpenSCManagerW (Address: 0x18007a0f0)
  • OpenServiceW (Address: 0x18007a0f8)
  • OpenThreadToken (Address: 0x18007a160)
  • QueryServiceConfigW (Address: 0x18007a108)
  • QueryServiceStatus (Address: 0x18007a110)
  • RegCloseKey (Address: 0x18007a1b0)
  • RegConnectRegistryW (Address: 0x18007a118)
  • RegCreateKeyExW (Address: 0x18007a0a0)
  • RegDeleteKeyW (Address: 0x18007a180)
  • RegDeleteValueW (Address: 0x18007a120)
  • RegEnumKeyExW (Address: 0x18007a128)
  • RegOpenKeyExA (Address: 0x18007a188)
  • RegOpenKeyExW (Address: 0x18007a1c0)
  • RegQueryValueExA (Address: 0x18007a1c8)
  • RegQueryValueExW (Address: 0x18007a1d0)
  • RegRestoreKeyW (Address: 0x18007a170)
  • RegSaveKeyW (Address: 0x18007a168)
  • RegSetValueExW (Address: 0x18007a0a8)
  • RevertToSelf (Address: 0x18007a098)
  • SetEntriesInAclW (Address: 0x18007a140)
  • SetFileSecurityW (Address: 0x18007a148)
  • SetSecurityDescriptorDacl (Address: 0x18007a138)
  • StartServiceW (Address: 0x18007a158)
credui.dll
  • CredUIInitControls (Address: 0x18007a9b0)
  • CredUIParseUserNameW (Address: 0x18007a9b8)
  • CredUIPromptForCredentialsW (Address: 0x18007a9a8)
CRYPT32.dll
  • CryptProtectData (Address: 0x18007a1f8)
  • CryptProtectMemory (Address: 0x18007a1e0)
  • CryptUnprotectData (Address: 0x18007a1f0)
  • CryptUnprotectMemory (Address: 0x18007a1e8)
DNSAPI.dll
  • DnsStatusString (Address: 0x18007a208)
  • DnsValidateName_W (Address: 0x18007a210)
GDI32.dll
  • CreateFontIndirectW (Address: 0x18007a220)
  • GetDeviceCaps (Address: 0x18007a228)
  • GetTextExtentPoint32W (Address: 0x18007a230)
  • LPtoDP (Address: 0x18007a238)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x18007a260)
  • AcquireSRWLockShared (Address: 0x18007a250)
  • ActivateActCtx (Address: 0x18007a2a8)
  • CloseHandle (Address: 0x18007a308)
  • CloseThreadpoolTimer (Address: 0x18007a390)
  • CompareStringW (Address: 0x18007a3f8)
  • CreateActCtxW (Address: 0x18007a298)
  • CreateDirectoryW (Address: 0x18007a518)
  • CreateFileW (Address: 0x18007a488)
  • CreateMutexExW (Address: 0x18007a500)
  • CreateMutexW (Address: 0x18007a520)
  • CreateProcessW (Address: 0x18007a310)
  • CreateSemaphoreExW (Address: 0x18007a370)
  • CreateThreadpoolTimer (Address: 0x18007a3c0)
  • DeactivateActCtx (Address: 0x18007a2b0)
  • DebugBreak (Address: 0x18007a2c0)
  • DeleteCriticalSection (Address: 0x18007a3a8)
  • DeleteFileW (Address: 0x18007a468)
  • DisableThreadLibraryCalls (Address: 0x18007a360)
  • EnterCriticalSection (Address: 0x18007a330)
  • ExpandEnvironmentStringsA (Address: 0x18007a3d8)
  • ExpandEnvironmentStringsW (Address: 0x18007a350)
  • FileTimeToLocalFileTime (Address: 0x18007a438)
  • FileTimeToSystemTime (Address: 0x18007a430)
  • FindActCtxSectionStringW (Address: 0x18007a2a0)
  • FindClose (Address: 0x18007a498)
  • FindFirstFileW (Address: 0x18007a5f0)
  • FindNextFileW (Address: 0x18007a5f8)
  • FormatMessageW (Address: 0x18007a300)
  • FreeConsole (Address: 0x18007a358)
  • FreeLibrary (Address: 0x18007a3e0)
  • GetCommandLineW (Address: 0x18007a528)
  • GetComputerNameExW (Address: 0x18007a530)
  • GetConsoleOutputCP (Address: 0x18007a5d8)
  • GetCurrentDirectoryW (Address: 0x18007a538)
  • GetCurrentProcess (Address: 0x18007a3d0)
  • GetCurrentProcessId (Address: 0x18007a4f8)
  • GetCurrentThread (Address: 0x18007a2b8)
  • GetCurrentThreadId (Address: 0x18007a2f8)
  • GetDiskFreeSpaceExW (Address: 0x18007a540)
  • GetDriveTypeW (Address: 0x18007a548)
  • GetExitCodeProcess (Address: 0x18007a558)
  • GetFileAttributesExW (Address: 0x18007a440)
  • GetFileAttributesW (Address: 0x18007a470)
  • GetFileType (Address: 0x18007a560)
  • GetFullPathNameW (Address: 0x18007a568)
  • GetLastError (Address: 0x18007a340)
  • GetLocalTime (Address: 0x18007a428)
  • GetModuleFileNameA (Address: 0x18007a2c8)
  • GetModuleFileNameW (Address: 0x18007a448)
  • GetModuleHandleExW (Address: 0x18007a2d0)
  • GetModuleHandleW (Address: 0x18007a280)
  • GetPrivateProfileStringW (Address: 0x18007a4f0)
  • GetProcAddress (Address: 0x18007a278)
  • GetProcessHeap (Address: 0x18007a2e8)
  • GetStartupInfoW (Address: 0x18007a318)
  • GetSystemDirectoryW (Address: 0x18007a570)
  • GetSystemTimeAsFileTime (Address: 0x18007a4a0)
  • GetSystemWindowsDirectoryW (Address: 0x18007a478)
  • GetTempFileNameW (Address: 0x18007a4e0)
  • GetTempPathW (Address: 0x18007a578)
  • GetTickCount (Address: 0x18007a320)
  • GetVersionExW (Address: 0x18007a420)
  • GetVolumePathNameW (Address: 0x18007a5c8)
  • GetWindowsDirectoryW (Address: 0x18007a580)
  • GlobalFree (Address: 0x18007a508)
  • GlobalLock (Address: 0x18007a588)
  • GlobalUnlock (Address: 0x18007a590)
  • HeapAlloc (Address: 0x18007a2f0)
  • HeapFree (Address: 0x18007a2e0)
  • InitializeCriticalSection (Address: 0x18007a458)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18007a328)
  • InitializeCriticalSectionEx (Address: 0x18007a3a0)
  • IsDebuggerPresent (Address: 0x18007a270)
  • IsWow64Process (Address: 0x18007a4d8)
  • LeaveCriticalSection (Address: 0x18007a5e0)
  • LoadLibraryExA (Address: 0x18007a2d8)
  • LoadLibraryExW (Address: 0x18007a3e8)
  • LoadLibraryW (Address: 0x18007a3c8)
  • LocalAlloc (Address: 0x18007a338)
  • LocalFree (Address: 0x18007a510)
  • MoveFileExW (Address: 0x18007a598)
  • MoveFileW (Address: 0x18007a460)
  • MulDiv (Address: 0x18007a4e8)
  • MultiByteToWideChar (Address: 0x18007a400)
  • OpenSemaphoreW (Address: 0x18007a3b8)
  • OutputDebugStringA (Address: 0x18007a288)
  • OutputDebugStringW (Address: 0x18007a268)
  • QueryActCtxW (Address: 0x18007a290)
  • QueryPerformanceCounter (Address: 0x18007a4a8)
  • ReleaseMutex (Address: 0x18007a378)
  • ReleaseSemaphore (Address: 0x18007a368)
  • ReleaseSRWLockExclusive (Address: 0x18007a258)
  • ReleaseSRWLockShared (Address: 0x18007a248)
  • RemoveDirectoryW (Address: 0x18007a5a0)
  • SetCurrentDirectoryW (Address: 0x18007a5b0)
  • SetErrorMode (Address: 0x18007a5c0)
  • SetFileAttributesW (Address: 0x18007a5b8)
  • SetFilePointer (Address: 0x18007a408)
  • SetFilePointerEx (Address: 0x18007a480)
  • SetLastError (Address: 0x18007a348)
  • SetThreadpoolTimer (Address: 0x18007a380)
  • SetThreadPreferredUILanguages (Address: 0x18007a5e8)
  • SetUnhandledExceptionFilter (Address: 0x18007a4b8)
  • Sleep (Address: 0x18007a5d0)
  • SleepConditionVariableSRW (Address: 0x18007a4c8)
  • TerminateProcess (Address: 0x18007a4b0)
  • TlsAlloc (Address: 0x18007a450)
  • TlsFree (Address: 0x18007a550)
  • TlsGetValue (Address: 0x18007a418)
  • TlsSetValue (Address: 0x18007a410)
  • UnhandledExceptionFilter (Address: 0x18007a4c0)
  • WaitForSingleObject (Address: 0x18007a3b0)
  • WaitForSingleObjectEx (Address: 0x18007a398)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18007a388)
  • WakeAllConditionVariable (Address: 0x18007a4d0)
  • WideCharToMultiByte (Address: 0x18007a3f0)
  • WriteFile (Address: 0x18007a490)
  • WritePrivateProfileStringW (Address: 0x18007a5a8)
msvcrt.dll
  • __C_specific_handler (Address: 0x18007ab18)
  • __CxxFrameHandler3 (Address: 0x18007aa18)
  • __dllonexit (Address: 0x18007a9f8)
  • __RTDynamicCast (Address: 0x18007a9c8)
  • _amsg_exit (Address: 0x18007ab38)
  • _beginthread (Address: 0x18007aaa8)
  • _beginthreadex (Address: 0x18007aa68)
  • _callnewh (Address: 0x18007aa48)
  • _CxxThrowException (Address: 0x18007aa38)
  • _errno (Address: 0x18007aa88)
  • _initterm (Address: 0x18007aa10)
  • _lock (Address: 0x18007aa08)
  • _onexit (Address: 0x18007a9f0)
  • _purecall (Address: 0x18007ab28)
  • _unlock (Address: 0x18007aa00)
  • _vsnprintf_s (Address: 0x18007ab00)
  • _vsnwprintf (Address: 0x18007ab10)
  • _wcsicmp (Address: 0x18007aa50)
  • _wcsnicmp (Address: 0x18007aa58)
  • _wfopen_s (Address: 0x18007aac8)
  • _wsetlocale (Address: 0x18007aa60)
  • _wsplitpath_s (Address: 0x18007aa70)
  • _XcptFilter (Address: 0x18007aa20)
  • ??_V@YAXPEAX@Z (Address: 0x18007ab20)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x18007aa40)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18007aad0)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x18007aae8)
  • ??0exception@@QEAA@XZ (Address: 0x18007aaf8)
  • ??1exception@@UEAA@XZ (Address: 0x18007aaf0)
  • ??1type_info@@UEAA@XZ (Address: 0x18007a9e0)
  • ??3@YAXPEAX@Z (Address: 0x18007ab30)
  • ?terminate@@YAXXZ (Address: 0x18007a9e8)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x18007aad8)
  • fclose (Address: 0x18007aab0)
  • fread (Address: 0x18007aac0)
  • free (Address: 0x18007aa90)
  • malloc (Address: 0x18007aa98)
  • memcmp (Address: 0x18007a9d0)
  • memcpy (Address: 0x18007aa30)
  • memcpy_s (Address: 0x18007ab08)
  • memmove (Address: 0x18007aa28)
  • memmove_s (Address: 0x18007aae0)
  • memset (Address: 0x18007a9d8)
  • wcscmp (Address: 0x18007ab40)
  • wcsstr (Address: 0x18007aab8)
  • wcstol (Address: 0x18007aa80)
  • wcstoul (Address: 0x18007aa78)
  • wprintf (Address: 0x18007aaa0)
NETAPI32.dll
  • DsGetDcNameW (Address: 0x18007a618)
  • DsRoleFreeMemory (Address: 0x18007a610)
  • DsRoleGetPrimaryDomainInformation (Address: 0x18007a620)
  • NetApiBufferFree (Address: 0x18007a630)
  • NetGetJoinInformation (Address: 0x18007a638)
  • NetpwPathType (Address: 0x18007a608)
  • NetWkstaGetInfo (Address: 0x18007a628)
ntdll.dll
  • RtlCaptureContext (Address: 0x18007ab58)
  • RtlLookupFunctionEntry (Address: 0x18007ab50)
  • RtlVirtualUnwind (Address: 0x18007ab60)
NTDSAPI.dll
  • DsCrackNamesW (Address: 0x18007a648)
  • DsFreeNameResultW (Address: 0x18007a650)
ole32.dll
  • CoCreateGuid (Address: 0x18007ab78)
  • CoCreateInstance (Address: 0x18007ab80)
  • CoInitialize (Address: 0x18007ab90)
  • CoUninitialize (Address: 0x18007ab88)
  • ReleaseStgMedium (Address: 0x18007ab70)
  • StringFromGUID2 (Address: 0x18007ab98)
OLEAUT32.dll
  • SafeArrayAccessData (Address: 0x18007a6b8)
  • SafeArrayGetDim (Address: 0x18007a6a8)
  • SafeArrayGetElement (Address: 0x18007a690)
  • SafeArrayGetElemsize (Address: 0x18007a6b0)
  • SafeArrayGetLBound (Address: 0x18007a680)
  • SafeArrayGetUBound (Address: 0x18007a688)
  • SafeArrayUnaccessData (Address: 0x18007a6c0)
  • SysAllocString (Address: 0x18007a670)
  • SysFreeString (Address: 0x18007a678)
  • VariantChangeType (Address: 0x18007a6a0)
  • VariantClear (Address: 0x18007a668)
  • VariantCopy (Address: 0x18007a698)
  • VariantInit (Address: 0x18007a660)
Secur32.dll
  • GetUserNameExW (Address: 0x18007a760)
SETUPAPI.dll
  • SetupCloseFileQueue (Address: 0x18007a6d8)
  • SetupCommitFileQueueW (Address: 0x18007a6e8)
  • SetupDefaultQueueCallbackW (Address: 0x18007a700)
  • SetupInitDefaultQueueCallbackEx (Address: 0x18007a6e0)
  • SetupOpenFileQueue (Address: 0x18007a6d0)
  • SetupQueueCopyW (Address: 0x18007a6f8)
  • SetupTermDefaultQueueCallback (Address: 0x18007a6f0)
SHELL32.dll
  • CommandLineToArgvW (Address: 0x18007a740)
  • SHBrowseForFolderW (Address: 0x18007a728)
  • ShellExecuteW (Address: 0x18007a718)
  • SHGetFolderLocation (Address: 0x18007a738)
  • SHGetFolderPathW (Address: 0x18007a710)
  • SHGetMalloc (Address: 0x18007a720)
  • SHGetPathFromIDListW (Address: 0x18007a730)
SHLWAPI.dll
  • (Address: 0x18007a750)
USER32.dll
  • CallWindowProcW (Address: 0x18007a7c8)
  • CheckDlgButton (Address: 0x18007a7d0)
  • CreateWindowExW (Address: 0x18007a7e0)
  • DestroyIcon (Address: 0x18007a798)
  • DestroyWindow (Address: 0x18007a7e8)
  • DialogBoxParamW (Address: 0x18007a7f0)
  • DispatchMessageW (Address: 0x18007a838)
  • EnableMenuItem (Address: 0x18007a8d0)
  • EnableWindow (Address: 0x18007a7f8)
  • EndDialog (Address: 0x18007a800)
  • GetDC (Address: 0x18007a868)
  • GetDesktopWindow (Address: 0x18007a770)
  • GetDlgCtrlID (Address: 0x18007a7b0)
  • GetDlgItem (Address: 0x18007a7d8)
  • GetKeyState (Address: 0x18007a7c0)
  • GetParent (Address: 0x18007a890)
  • GetSystemMenu (Address: 0x18007a7a0)
  • GetWindowLongPtrW (Address: 0x18007a828)
  • GetWindowLongW (Address: 0x18007a820)
  • GetWindowRect (Address: 0x18007a818)
  • GetWindowTextLengthW (Address: 0x18007a808)
  • GetWindowTextW (Address: 0x18007a810)
  • IsDlgButtonChecked (Address: 0x18007a830)
  • IsWindow (Address: 0x18007a898)
  • LoadCursorW (Address: 0x18007a8c8)
  • LoadIconW (Address: 0x18007a8c0)
  • LoadImageW (Address: 0x18007a7a8)
  • LoadStringW (Address: 0x18007a780)
  • MapWindowPoints (Address: 0x18007a788)
  • MessageBoxW (Address: 0x18007a778)
  • MsgWaitForMultipleObjectsEx (Address: 0x18007a850)
  • PeekMessageW (Address: 0x18007a848)
  • PostMessageW (Address: 0x18007a8b8)
  • RegisterClipboardFormatW (Address: 0x18007a8b0)
  • ReleaseDC (Address: 0x18007a8a8)
  • SendDlgItemMessageW (Address: 0x18007a790)
  • SendMessageW (Address: 0x18007a7b8)
  • SetClassLongPtrW (Address: 0x18007a8d8)
  • SetCursor (Address: 0x18007a8a0)
  • SetDlgItemTextW (Address: 0x18007a8e0)
  • SetWindowLongPtrW (Address: 0x18007a888)
  • SetWindowPos (Address: 0x18007a858)
  • SetWindowTextW (Address: 0x18007a880)
  • ShowWindow (Address: 0x18007a878)
  • SystemParametersInfoW (Address: 0x18007a870)
  • TranslateMessage (Address: 0x18007a840)
  • WinHelpW (Address: 0x18007a860)
WINBRAND.dll
  • BrandingFormatString (Address: 0x18007a8f0)
WLDAP32.dll
  • (Address: 0x18007a900)
  • (Address: 0x18007a908)
  • (Address: 0x18007a910)
  • (Address: 0x18007a918)
  • (Address: 0x18007a920)
  • (Address: 0x18007a928)
  • (Address: 0x18007a930)
  • (Address: 0x18007a938)
  • (Address: 0x18007a940)
  • (Address: 0x18007a948)
  • (Address: 0x18007a950)
WS2_32.dll
  • bind (Address: 0x18007a970)
  • closesocket (Address: 0x18007a988)
  • htons (Address: 0x18007a978)
  • setsockopt (Address: 0x18007a980)
  • socket (Address: 0x18007a998)
  • WSACleanup (Address: 0x18007a968)
  • WSAGetLastError (Address: 0x18007a990)
  • WSAStartup (Address: 0x18007a960)