grouptrusteeai.dll

v10.0.19041.3266 64-bit Windows NT Analyzed
Download
Description
CSI GroupTrustee plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
45.8 KB
Uploaded
2025-12-01 08:15
Views
42
SHA-256
10fb2df1871d77ca5cf6ca7c2abad720

Exported functions 2

DllCanUnloadNow #1 · 0x42f0
DllCsiGetHandler #2 · 0x4310

Imported DLLs & functions 79

api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1800072c0
RaiseException 0x1800072c8
SetUnhandledExceptionFilter 0x1800072b8
UnhandledExceptionFilter 0x1800072b0
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800072e0
HeapAlloc 0x1800072d8
HeapDestroy 0x1800072e8
api-ms-win-core-heap-obsolete-l1-1-0.dll 1
LocalFree 0x1800072f8
api-ms-win-core-libraryloader-l1-1-0.dll 4
DisableThreadLibraryCalls 0x180007320
FreeLibrary 0x180007310
GetProcAddress 0x180007318
LoadLibraryExA 0x180007308
api-ms-win-core-memory-l1-1-0.dll 2
VirtualProtect 0x180007338
VirtualQuery 0x180007330
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x180007348
GetCurrentProcessId 0x180007358
GetCurrentThreadId 0x180007360
TerminateProcess 0x180007350
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180007370
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x180007388
RtlLookupFunctionEntry 0x180007390
RtlVirtualUnwind 0x180007380
api-ms-win-core-synch-l1-1-0.dll 4
AcquireSRWLockExclusive 0x1800073a8
DeleteCriticalSection 0x1800073b8
InitializeCriticalSection 0x1800073b0
ReleaseSRWLockExclusive 0x1800073a0
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1800073c8
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x1800073e0
GetSystemTimeAsFileTime 0x1800073d8
GetTickCount 0x1800073e8
api-ms-win-security-base-l1-1-0.dll 1
CreateWellKnownSid 0x1800073f8
api-ms-win-security-lsapolicy-l1-1-0.dll 6
LsaAddAccountRights 0x180007410
LsaClose 0x180007420
LsaFreeMemory 0x180007418
LsaOpenPolicy 0x180007430
LsaQueryInformationPolicy 0x180007428
LsaRemoveAccountRights 0x180007408
api-ms-win-security-sddl-l1-1-0.dll 1
ConvertSidToStringSidW 0x180007440
msvcrt.dll 12
__C_specific_handler 0x180007480
_amsg_exit 0x180007458
_callnewh 0x180007498
_initterm 0x180007450
_itow_s 0x180007478
_purecall 0x180007488
_XcptFilter 0x180007460
free 0x180007470
malloc 0x180007468
memcmp 0x180007490
memcpy 0x1800074a0
memset 0x1800074a8
ntdll.dll 7
RtlCompareUnicodeString 0x1800074c0
RtlCopySid 0x1800074d8
RtlCreateServiceSid 0x1800074c8
RtlEqualUnicodeString 0x1800074e0
RtlInitUnicodeString 0x1800074d0
RtlSubAuthorityCountSid 0x1800074b8
RtlSubAuthoritySid 0x1800074e8
WCP.dll 22
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x180007288
?RtlTraceFormat_PCLUNICODE_STRING_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180007210
?RtlTraceFormat_PCULONG_AsDecimalOnly@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180007250
?RtlTraceFormat_PCUNICODE_STRING@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180007260
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x180007268
AddTrusteeCapabilities 0x180007248
ConvertHResultToNtStatus 0x180007228
ConvertNtStatusToHResult 0x180007218
DeleteTrusteeCapabilities 0x180007278
DeleteTrusteeData 0x180007258
GetGroupTrusteeDataCountFromManifest 0x180007280
GetGroupTrusteeDataFromManifest 0x180007270
MapToPrivilegeName 0x180007238
MapToWellKnownSidType 0x180007240
RtlCompareLUnicodeStrings 0x180007230
RtlDowncaseUCSCharacter 0x180007208
RtlFreeLUnicodeString 0x180007200
RtlHashLUnicodeString 0x1800072a0
RtlInitLUnicodeStringFromNullTerminatedString 0x180007290
RtlInitLUnicodeStringFromUnicodeString 0x180007298
RtlReallocateLUnicodeString 0x1800071f8
RtlReportErrorOrigination 0x180007220