dsrolesrv.dll

Description: DS Role Server DLL

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 724ffb6a1af732fa96ec4e50c2a8cfb8

File Size: 323.0 KB

Uploaded At: Dec. 1, 2025, 8:12 a.m.

Views: 15

Exported Functions

DsRoleGetCustomAllowListPathRank (Ordinal: 1, Address: 0x7860)
DsRoleIGetPrimaryDomainInformationOpState (Ordinal: 2, Address: 0x6d20)
DsRoleIsPassedAllowedList (Ordinal: 3, Address: 0x7720)
DsRoleServiceMain (Ordinal: 4, Address: 0x7dc0)
DsRolepCheckExistingCloneConfigFile (Ordinal: 5, Address: 0x96b0)
DsRolepCleanupDFSRDBFolder (Ordinal: 6, Address: 0xa4d0)
DsRolepEnablePrivilege (Ordinal: 7, Address: 0x9ec0)
DsRolepFixClone (Ordinal: 8, Address: 0x3df0)
DsRolepRunSysprepProvidersForCloning (Ordinal: 9, Address: 0x12af0)
DsRolepSetDSRMBootMode (Ordinal: 10, Address: 0x9e30)

Imported DLLs & Functions

ADVAPI32.dll

LsaCreateTrustedDomainEx (Address: 0x180039530)
LsaNtStatusToWinError (Address: 0x180039538)
LsaOpenTrustedDomain (Address: 0x180039528)
LsaOpenTrustedDomainByName (Address: 0x180039548)
LsaQueryInfoTrustedDomain (Address: 0x180039550)
LsaQueryTrustedDomainInfoByName (Address: 0x180039540)
SystemFunction004 (Address: 0x180039558)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180039738)
IsDebuggerPresent (Address: 0x180039740)
OutputDebugStringW (Address: 0x180039730)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180039750)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180039760)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180039770)
SetLastError (Address: 0x180039780)
SetUnhandledExceptionFilter (Address: 0x180039788)
UnhandledExceptionFilter (Address: 0x180039778)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x1800397e8)
CreateFileW (Address: 0x180039800)
DeleteFileW (Address: 0x1800397a0)
FindClose (Address: 0x180039820)
FindFirstFileW (Address: 0x1800397d8)
FindNextFileW (Address: 0x1800397d0)
FlushFileBuffers (Address: 0x1800397c0)
GetDriveTypeW (Address: 0x180039798)
GetFileAttributesExW (Address: 0x1800397f8)
GetFileAttributesW (Address: 0x1800397c8)
GetFileSize (Address: 0x180039810)
GetLogicalDriveStringsW (Address: 0x1800397b8)
GetVolumeInformationW (Address: 0x1800397e0)
ReadFile (Address: 0x1800397f0)
RemoveDirectoryW (Address: 0x180039828)
SetFileAttributesW (Address: 0x1800397b0)
SetFileInformationByHandle (Address: 0x1800397a8)
SetFilePointer (Address: 0x180039818)
WriteFile (Address: 0x180039808)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x180039838)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x180039848)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180039858)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180039878)
HeapAlloc (Address: 0x180039868)
HeapFree (Address: 0x180039870)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180039890)
LocalFree (Address: 0x180039888)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x1800398a0)
MoveFileW (Address: 0x1800398a8)

api-ms-win-core-kernel32-legacy-l1-1-2.dll

VerifyVersionInfoA (Address: 0x1800398b8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800398f0)
FreeLibrary (Address: 0x1800398c8)
GetModuleFileNameA (Address: 0x1800398d8)
GetModuleHandleExW (Address: 0x1800398e0)
GetModuleHandleW (Address: 0x1800398f8)
GetProcAddress (Address: 0x1800398d0)
LoadLibraryExW (Address: 0x1800398e8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180039908)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180039918)
GetEnvironmentVariableW (Address: 0x180039920)
SetEnvironmentVariableW (Address: 0x180039928)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x180039968)
CreateThread (Address: 0x180039948)
ExitProcess (Address: 0x180039958)
ExitThread (Address: 0x180039938)
GetCurrentProcess (Address: 0x180039950)
GetCurrentProcessId (Address: 0x180039960)
GetCurrentThreadId (Address: 0x180039978)
GetExitCodeProcess (Address: 0x180039970)
OpenProcessToken (Address: 0x180039940)
TerminateProcess (Address: 0x180039980)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180039990)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800399f8)
RegCreateKeyExW (Address: 0x1800399b0)
RegDeleteValueA (Address: 0x1800399d0)
RegDeleteValueW (Address: 0x1800399a8)
RegEnumKeyExW (Address: 0x180039a00)
RegFlushKey (Address: 0x1800399a0)
RegGetValueW (Address: 0x1800399c0)
RegLoadKeyW (Address: 0x180039a08)
RegOpenKeyExA (Address: 0x1800399d8)
RegOpenKeyExW (Address: 0x1800399c8)
RegQueryInfoKeyA (Address: 0x180039a10)
RegQueryValueExW (Address: 0x1800399f0)
RegSetValueExA (Address: 0x1800399e0)
RegSetValueExW (Address: 0x1800399b8)
RegUnLoadKeyW (Address: 0x1800399e8)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x180039a20)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180039a40)
RtlLookupFunctionEntry (Address: 0x180039a30)
RtlVirtualUnwind (Address: 0x180039a38)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathIsRootW (Address: 0x180039a50)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x180039a60)
MultiByteToWideChar (Address: 0x180039a68)
WideCharToMultiByte (Address: 0x180039a70)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180039aa0)
AcquireSRWLockShared (Address: 0x180039ac0)
CreateEventW (Address: 0x180039af8)
CreateMutexExW (Address: 0x180039ad0)
CreateSemaphoreExW (Address: 0x180039a90)
DeleteCriticalSection (Address: 0x180039ab0)
EnterCriticalSection (Address: 0x180039a88)
InitializeCriticalSectionEx (Address: 0x180039ae8)
LeaveCriticalSection (Address: 0x180039aa8)
OpenSemaphoreW (Address: 0x180039ae0)
ReleaseMutex (Address: 0x180039a80)
ReleaseSemaphore (Address: 0x180039a98)
ReleaseSRWLockExclusive (Address: 0x180039af0)
ReleaseSRWLockShared (Address: 0x180039b00)
SetEvent (Address: 0x180039ad8)
WaitForSingleObject (Address: 0x180039ab8)
WaitForSingleObjectEx (Address: 0x180039ac8)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180039b10)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x180039b20)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x180039b38)
GetSystemDirectoryW (Address: 0x180039b50)
GetSystemTime (Address: 0x180039b40)
GetSystemTimeAsFileTime (Address: 0x180039b30)
GetTickCount (Address: 0x180039b48)
GetTickCount64 (Address: 0x180039b58)
GetWindowsDirectoryW (Address: 0x180039b60)

api-ms-win-core-sysinfo-l1-2-0.dll

SetComputerNameExW (Address: 0x180039b70)
VerSetConditionMask (Address: 0x180039b78)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180039b98)
CreateThreadpoolTimer (Address: 0x180039ba0)
SetThreadpoolTimer (Address: 0x180039b88)
WaitForThreadpoolTimerCallbacks (Address: 0x180039b90)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x180039bb0)
TraceMessageVa (Address: 0x180039bb8)

api-ms-win-security-activedirectoryclient-l1-1-0.dll

DsUnBindW (Address: 0x180039bc8)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x180039c28)
AccessCheckAndAuditAlarmW (Address: 0x180039c30)
AddAccessAllowedAce (Address: 0x180039c60)
AddAuditAccessAce (Address: 0x180039bd8)
AdjustTokenPrivileges (Address: 0x180039c08)
GetFileSecurityW (Address: 0x180039bf8)
GetLengthSid (Address: 0x180039c40)
GetSecurityDescriptorControl (Address: 0x180039c50)
GetSecurityDescriptorDacl (Address: 0x180039c00)
GetSecurityDescriptorSacl (Address: 0x180039c10)
ImpersonateLoggedOnUser (Address: 0x180039c68)
InitializeAcl (Address: 0x180039c38)
InitializeSecurityDescriptor (Address: 0x180039bf0)
RevertToSelf (Address: 0x180039c58)
SetFileSecurityW (Address: 0x180039be8)
SetSecurityDescriptorControl (Address: 0x180039be0)
SetSecurityDescriptorDacl (Address: 0x180039c70)
SetSecurityDescriptorGroup (Address: 0x180039c48)
SetSecurityDescriptorOwner (Address: 0x180039c20)
SetSecurityDescriptorSacl (Address: 0x180039c18)

bcd.dll

BcdCloseObject (Address: 0x180039c98)
BcdCloseStore (Address: 0x180039c80)
BcdDeleteElement (Address: 0x180039c88)
BcdOpenObject (Address: 0x180039c90)
BcdOpenSystemStore (Address: 0x180039ca0)
BcdSetElementData (Address: 0x180039ca8)

bcrypt.dll

BCryptCreateHash (Address: 0x180039cd0)
BCryptDestroyHash (Address: 0x180039cb8)
BCryptDestroyKey (Address: 0x180039ce8)
BCryptEncrypt (Address: 0x180039cc0)
BCryptFinishHash (Address: 0x180039ce0)
BCryptGenerateSymmetricKey (Address: 0x180039cd8)
BCryptHashData (Address: 0x180039cc8)

KERNEL32.dll

FileTimeToSystemTime (Address: 0x180039598)
GetSystemInfo (Address: 0x180039580)
lstrcmpiW (Address: 0x180039568)
SetThreadStackGuarantee (Address: 0x180039588)
VirtualAlloc (Address: 0x180039578)
VirtualProtect (Address: 0x180039570)
VirtualQuery (Address: 0x180039590)

LSASRV.dll

LsaIFree_LSAPR_POLICY_INFORMATION (Address: 0x1800395e0)
LsaIFreeForestTrustInfo (Address: 0x1800395d0)
LsaIOpenPolicyTrusted (Address: 0x1800395b8)
LsaIQueryForestTrustInfo (Address: 0x1800395b0)
LsaIQueryInformationPolicyTrusted (Address: 0x1800395e8)
LsaISafeMode (Address: 0x180039600)
LsapCrServerGetSessionKey (Address: 0x1800395d8)
LsapDsInitializeDsStateInfo (Address: 0x1800395f0)
LsapDssetupInitializeGetPrimaryDomainInformationOpState (Address: 0x1800395f8)
LsapDsUnitializeDsStateInfo (Address: 0x1800395c0)
LsapInitializeLsaDb (Address: 0x180039610)
LsarOpenPolicy (Address: 0x180039608)
LsarRetrievePrivateData (Address: 0x1800395a8)
LsarStorePrivateData (Address: 0x1800395c8)

msvcrt.dll

__C_specific_handler (Address: 0x180039cf8)
__dllonexit (Address: 0x180039d08)
_amsg_exit (Address: 0x180039d40)
_callnewh (Address: 0x180039d30)
_initterm (Address: 0x180039d20)
_itow_s (Address: 0x180039db0)
_lock (Address: 0x180039d18)
_onexit (Address: 0x180039d00)
_purecall (Address: 0x180039d58)
_snwprintf_s (Address: 0x180039d60)
_ultow (Address: 0x180039d80)
_unlock (Address: 0x180039d10)
_vsnwprintf (Address: 0x180039da8)
_wcsicmp (Address: 0x180039db8)
_wcsnicmp (Address: 0x180039dc8)
_wtoi (Address: 0x180039da0)
_XcptFilter (Address: 0x180039d48)
calloc (Address: 0x180039d38)
free (Address: 0x180039d98)
malloc (Address: 0x180039d88)
memcmp (Address: 0x180039d28)
memcpy (Address: 0x180039de0)
memcpy_s (Address: 0x180039d68)
memmove_s (Address: 0x180039d50)
memset (Address: 0x180039de8)
realloc (Address: 0x180039d70)
wcschr (Address: 0x180039d78)
wcscpy_s (Address: 0x180039dd8)
wcsncmp (Address: 0x180039dc0)
wcsrchr (Address: 0x180039d90)
wcsstr (Address: 0x180039dd0)

ntdll.dll

_stricmp (Address: 0x180039df8)
bsearch (Address: 0x180039e00)
EtwEventRegister (Address: 0x180039f28)
EtwEventUnregister (Address: 0x180039f38)
EtwEventWrite (Address: 0x180039f98)
EtwTraceMessageVa (Address: 0x180039f60)
iswspace (Address: 0x180039e10)
NtAdjustPrivilegesToken (Address: 0x180039e70)
NtClose (Address: 0x180039f70)
NtCreateEvent (Address: 0x180039f20)
NtCreateFile (Address: 0x180039eb0)
NtDuplicateToken (Address: 0x180039e90)
NtFsControlFile (Address: 0x180039eb8)
NtOpenEvent (Address: 0x180039f88)
NtOpenFile (Address: 0x180039ea8)
NtOpenProcessToken (Address: 0x180039e68)
NtOpenThreadToken (Address: 0x180039e80)
NtQuerySystemTime (Address: 0x180039e20)
NtResetEvent (Address: 0x180039e98)
NtSetEvent (Address: 0x180039ee0)
NtSetInformationFile (Address: 0x180039ec8)
NtSetSystemTime (Address: 0x180039e30)
NtShutdownSystem (Address: 0x180039ee8)
NtWaitForSingleObject (Address: 0x180039f08)
qsort (Address: 0x180039e08)
RtlAcquireResourceExclusive (Address: 0x180039f68)
RtlAdjustPrivilege (Address: 0x180039ef8)
RtlAllocateAndInitializeSid (Address: 0x180039e88)
RtlAllocateHeap (Address: 0x180039f00)
RtlCompareUnicodeString (Address: 0x180039ea0)
RtlDeleteCriticalSection (Address: 0x180039e60)
RtlDeleteElementGenericTableAvl (Address: 0x180039f58)
RtlDeleteResource (Address: 0x180039e50)
RtlDosPathNameToNtPathName_U (Address: 0x180039ec0)
RtlEnterCriticalSection (Address: 0x180039ef0)
RtlEqualSid (Address: 0x180039e78)
RtlEqualUnicodeString (Address: 0x180039e18)
RtlFreeHeap (Address: 0x180039f18)
RtlFreeUnicodeString (Address: 0x180039ed0)
RtlGetNtProductType (Address: 0x180039e48)
RtlImageNtHeader (Address: 0x180039f30)
RtlInitializeCriticalSection (Address: 0x180039e38)
RtlInitializeGenericTableAvl (Address: 0x180039f40)
RtlInitializeResource (Address: 0x180039e40)
RtlInitString (Address: 0x180039e28)
RtlInitUnicodeString (Address: 0x180039f80)
RtlInsertElementGenericTableAvl (Address: 0x180039f48)
RtlIpv6StringToAddressW (Address: 0x180039f90)
RtlLeaveCriticalSection (Address: 0x180039ed8)
RtlLookupElementGenericTableAvl (Address: 0x180039f50)
RtlNtStatusToDosError (Address: 0x180039f10)
RtlReleaseResource (Address: 0x180039f78)
RtlTimeFieldsToTime (Address: 0x180039e58)

RPCRT4.dll

I_RpcGetExtendedError (Address: 0x180039628)
NdrClientCall3 (Address: 0x180039670)
NdrServerCall2 (Address: 0x180039630)
NdrServerCallAll (Address: 0x180039638)
RpcBindingFree (Address: 0x180039680)
RpcBindingFromStringBindingW (Address: 0x1800396b0)
RpcBindingSetOption (Address: 0x180039690)
RpcBindingToStringBindingW (Address: 0x180039640)
RpcErrorEndEnumeration (Address: 0x180039660)
RpcErrorGetNextRecord (Address: 0x180039668)
RpcErrorStartEnumeration (Address: 0x180039650)
RpcImpersonateClient (Address: 0x1800396c0)
RpcMgmtSetComTimeout (Address: 0x1800396a0)
RpcRevertToSelf (Address: 0x1800396b8)
RpcServerInqDefaultPrincNameW (Address: 0x180039658)
RpcServerRegisterAuthInfoW (Address: 0x180039698)
RpcServerRegisterIfEx (Address: 0x180039648)
RpcServerUnregisterIfEx (Address: 0x180039620)
RpcServerUseProtseqEpW (Address: 0x180039678)
RpcStringBindingComposeW (Address: 0x1800396a8)
RpcStringBindingParseW (Address: 0x1800396c8)
RpcStringFreeW (Address: 0x180039688)

SAMSRV.dll

SamIGetDefaultAdministratorName (Address: 0x1800396d8)
SamIQueryCapabilities (Address: 0x1800396e0)

SYSNTFY.dll

SysNotifyStartServer (Address: 0x1800396f0)

WDSCORE.dll

ConstructPartialMsgVW (Address: 0x180039720)
CurrentIP (Address: 0x180039718)
WdsInitialize (Address: 0x180039710)
WdsSetupLogMessageW (Address: 0x180039700)
WdsTerminate (Address: 0x180039708)