grouptrusteeai.dll

v10.0.19041.2300 32-bit Windows NT Analyzed
Download
Description
CSI GroupTrustee plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
38.9 KB
Uploaded
2025-12-01 08:34
Views
36
SHA-256
e1ff809b854640a2763c0911063f6f0c

Exported functions 2

DllCanUnloadNow #1 · 0x4a30
DllCsiGetHandler #2 · 0x4a50

Imported DLLs & functions 75

api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x10008064
RaiseException 0x10008068
SetUnhandledExceptionFilter 0x10008060
UnhandledExceptionFilter 0x1000805c
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x10008074
HeapAlloc 0x10008070
HeapDestroy 0x10008078
api-ms-win-core-heap-obsolete-l1-1-0.dll 1
LocalFree 0x10008080
api-ms-win-core-libraryloader-l1-1-0.dll 4
DisableThreadLibraryCalls 0x10008090
FreeLibrary 0x10008094
GetProcAddress 0x10008088
LoadLibraryExA 0x1000808c
api-ms-win-core-memory-l1-1-0.dll 2
VirtualProtect 0x100080a0
VirtualQuery 0x1000809c
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x100080b0
GetCurrentProcessId 0x100080a8
GetCurrentThreadId 0x100080ac
TerminateProcess 0x100080b4
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100080bc
api-ms-win-core-synch-l1-1-0.dll 4
AcquireSRWLockExclusive 0x100080c8
DeleteCriticalSection 0x100080d0
InitializeCriticalSection 0x100080c4
ReleaseSRWLockExclusive 0x100080cc
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x100080d8
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x100080e0
GetSystemTimeAsFileTime 0x100080e8
GetTickCount 0x100080e4
api-ms-win-security-base-l1-1-0.dll 1
CreateWellKnownSid 0x100080f0
api-ms-win-security-lsapolicy-l1-1-0.dll 6
LsaAddAccountRights 0x10008104
LsaClose 0x100080f8
LsaFreeMemory 0x100080fc
LsaOpenPolicy 0x10008108
LsaQueryInformationPolicy 0x1000810c
LsaRemoveAccountRights 0x10008100
api-ms-win-security-sddl-l1-1-0.dll 1
ConvertSidToStringSidW 0x10008114
msvcrt.dll 11
_amsg_exit 0x10008128
_callnewh 0x10008130
_except_handler4_common 0x10008120
_initterm 0x10008124
_itow_s 0x10008140
_purecall 0x1000813c
_XcptFilter 0x1000812c
free 0x10008138
malloc 0x10008134
memcpy 0x1000811c
memset 0x10008144
ntdll.dll 7
RtlCompareUnicodeString 0x10008150
RtlCopySid 0x1000815c
RtlCreateServiceSid 0x10008154
RtlEqualUnicodeString 0x10008160
RtlInitUnicodeString 0x10008158
RtlSubAuthorityCountSid 0x1000814c
RtlSubAuthoritySid 0x10008164
WCP.dll 22
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x10008050
?RtlTraceFormat_PCLUNICODE_STRING_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10008014
?RtlTraceFormat_PCULONG_AsDecimalOnly@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10008038
?RtlTraceFormat_PCUNICODE_STRING@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1000803c
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x10008044
AddTrusteeCapabilities 0x10008034
ConvertHResultToNtStatus 0x10008020
ConvertNtStatusToHResult 0x10008018
DeleteTrusteeCapabilities 0x10008024
DeleteTrusteeData 0x10008040
GetGroupTrusteeDataCountFromManifest 0x1000804c
GetGroupTrusteeDataFromManifest 0x10008048
MapToPrivilegeName 0x10008028
MapToWellKnownSidType 0x1000802c
RtlCompareLUnicodeStrings 0x10008008
RtlDowncaseUCSCharacter 0x10008010
RtlFreeLUnicodeString 0x10008000
RtlHashLUnicodeString 0x10008054
RtlInitLUnicodeStringFromNullTerminatedString 0x10008004
RtlInitLUnicodeStringFromUnicodeString 0x10008030
RtlReallocateLUnicodeString 0x1000800c
RtlReportErrorOrigination 0x1000801c