gpsvc.dll

v10.0.19041.5794 64-bit Windows NT Analyzed
Download
Description
Group Policy Client
Authors
© Microsoft Corporation. All rights reserved.
File size
1.3 MB
Uploaded
2025-12-01 07:28
Views
92
SHA-256
4f19613a337846e4d4d96aa27a5621c9

Exported functions 13

#106 · 0xa1800
GroupPolicyClientServiceMain #107 · 0x5780
SvchostPushServiceGlobals #108 · 0x261a0
DllCanUnloadNow #109 · 0x9e3e0
DllGetClassObject #110 · 0x9e410
GenerateRsopPolicy #111 · 0x72310
IsSecureCachingDisabled #112 · 0x34b20
ProcessGroupPolicyCompletedExInternal #113 · 0x7ce50
ProcessGroupPolicyCompletedInternal #114 · 0x7dd00
RsopAccessCheckByTypeInternal #115 · 0xa1240
RsopFileAccessCheckInternal #116 · 0xa15a0
RsopResetPolicySettingStatusInternal #117 · 0xa1940
RsopSetPolicySettingStatusInternal #118 · 0xa1d90

Imported DLLs & functions 326

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1800c7e68
IsDebuggerPresent 0x1800c7e70
OutputDebugStringW 0x1800c7e60
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1800c7e80
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x1800c7e90
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1800c7eb0
SetLastError 0x1800c7ea0
SetUnhandledExceptionFilter 0x1800c7eb8
UnhandledExceptionFilter 0x1800c7ea8
api-ms-win-core-file-l1-1-0.dll 16
CompareFileTime 0x1800c7ed8
CreateDirectoryW 0x1800c7f28
CreateFileW 0x1800c7ec8
DeleteFileW 0x1800c7ef0
FindClose 0x1800c7f10
FindFirstFileW 0x1800c7f00
FindNextFileW 0x1800c7ee8
GetFileAttributesExW 0x1800c7ee0
GetFileAttributesW 0x1800c7f40
GetFileSizeEx 0x1800c7f08
GetFileTime 0x1800c7f30
ReadFile 0x1800c7f38
RemoveDirectoryW 0x1800c7ed0
SetFileAttributesW 0x1800c7ef8
SetFilePointer 0x1800c7f18
WriteFile 0x1800c7f20
api-ms-win-core-file-l2-1-0.dll 1
MoveFileExW 0x1800c7f50
api-ms-win-core-file-l2-1-2.dll 1
CopyFileW 0x1800c7f60
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x1800c7f70
DuplicateHandle 0x1800c7f78
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800c7f88
HeapAlloc 0x1800c7f98
HeapFree 0x1800c7f90
api-ms-win-core-heap-l2-1-0.dll 5
GlobalAlloc 0x1800c7fa8
GlobalFree 0x1800c7fb8
LocalAlloc 0x1800c7fc0
LocalFree 0x1800c7fb0
LocalReAlloc 0x1800c7fc8
api-ms-win-core-heap-obsolete-l1-1-0.dll 1
LocalFlags 0x1800c7fd8
api-ms-win-core-job-l2-1-0.dll 4
AssignProcessToJobObject 0x1800c7ff0
CreateJobObjectW 0x1800c8000
SetInformationJobObject 0x1800c7ff8
TerminateJobObject 0x1800c7fe8
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
GetComputerNameW 0x1800c8018
WTSGetActiveConsoleSessionId 0x1800c8010
api-ms-win-core-kernel32-legacy-l1-1-5.dll 1
SetThreadExecutionState 0x1800c8028
api-ms-win-core-libraryloader-l1-2-0.dll 8
FreeLibrary 0x1800c8038
FreeLibraryAndExitThread 0x1800c8040
GetModuleFileNameA 0x1800c8058
GetModuleHandleExW 0x1800c8060
GetModuleHandleW 0x1800c8070
GetProcAddress 0x1800c8050
LoadLibraryExW 0x1800c8068
LoadStringW 0x1800c8048
api-ms-win-core-localization-l1-2-0.dll 2
FindNLSString 0x1800c8080
FormatMessageW 0x1800c8088
api-ms-win-core-localization-obsolete-l1-2-0.dll 1
CompareStringA 0x1800c8098
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x1800c80b8
MapViewOfFile 0x1800c80b0
UnmapViewOfFile 0x1800c80a8
api-ms-win-core-path-l1-1-0.dll 1
PathCchCombineEx 0x1800c80c8
api-ms-win-core-privateprofile-l1-1-0.dll 3
GetPrivateProfileIntW 0x1800c80e0
GetPrivateProfileStringW 0x1800c80e8
GetProfileIntW 0x1800c80d8
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x1800c80f8
api-ms-win-core-processthreads-l1-1-0.dll 13
CreateProcessAsUserW 0x1800c8150
CreateThread 0x1800c8140
GetCurrentProcess 0x1800c8158
GetCurrentProcessId 0x1800c8168
GetCurrentThread 0x1800c8138
GetCurrentThreadId 0x1800c8160
OpenProcessToken 0x1800c8108
OpenThreadToken 0x1800c8130
ResumeThread 0x1800c8110
SetPriorityClass 0x1800c8118
SetThreadPriority 0x1800c8120
SetThreadToken 0x1800c8148
TerminateProcess 0x1800c8128
api-ms-win-core-processthreads-l1-1-1.dll 2
GetProcessMitigationPolicy 0x1800c8178
SetProcessMitigationPolicy 0x1800c8180
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800c8190
api-ms-win-core-registry-l1-1-0.dll 16
RegCloseKey 0x1800c81c8
RegCreateKeyExW 0x1800c81e8
RegDeleteKeyExW 0x1800c81b8
RegDeleteValueW 0x1800c81f8
RegEnumKeyExW 0x1800c81c0
RegEnumValueW 0x1800c8218
RegGetKeySecurity 0x1800c81a8
RegGetValueW 0x1800c81d0
RegNotifyChangeKeyValue 0x1800c8210
RegOpenCurrentUser 0x1800c8208
RegOpenKeyExW 0x1800c8200
RegQueryInfoKeyW 0x1800c81a0
RegQueryValueExA 0x1800c81b0
RegQueryValueExW 0x1800c81d8
RegSetKeySecurity 0x1800c81e0
RegSetValueExW 0x1800c81f0
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x1800c8238
RtlLookupFunctionEntry 0x1800c8228
RtlVirtualUnwind 0x1800c8230
api-ms-win-core-string-l1-1-0.dll 3
CompareStringEx 0x1800c8248
CompareStringW 0x1800c8250
MultiByteToWideChar 0x1800c8258
api-ms-win-core-string-obsolete-l1-1-0.dll 2
lstrcmpiW 0x1800c8270
lstrcmpW 0x1800c8268
api-ms-win-core-synch-l1-1-0.dll 24
AcquireSRWLockExclusive 0x1800c82a0
AcquireSRWLockShared 0x1800c82a8
CreateEventW 0x1800c82f8
CreateMutexExW 0x1800c82b8
CreateSemaphoreExW 0x1800c82e0
CreateWaitableTimerExW 0x1800c82d0
DeleteCriticalSection 0x1800c82c0
EnterCriticalSection 0x1800c8308
InitializeCriticalSection 0x1800c8310
InitializeCriticalSectionAndSpinCount 0x1800c8338
InitializeCriticalSectionEx 0x1800c8328
LeaveCriticalSection 0x1800c8320
OpenEventW 0x1800c82f0
OpenSemaphoreW 0x1800c8288
ReleaseMutex 0x1800c82e8
ReleaseSemaphore 0x1800c8318
ReleaseSRWLockExclusive 0x1800c82b0
ReleaseSRWLockShared 0x1800c8280
ResetEvent 0x1800c8330
SetEvent 0x1800c8290
SetWaitableTimer 0x1800c82c8
WaitForMultipleObjectsEx 0x1800c82d8
WaitForSingleObject 0x1800c8300
WaitForSingleObjectEx 0x1800c8298
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1800c8348
api-ms-win-core-sysinfo-l1-1-0.dll 7
GetComputerNameExW 0x1800c8370
GetLocalTime 0x1800c8388
GetSystemDirectoryW 0x1800c8358
GetSystemTime 0x1800c8380
GetSystemTimeAsFileTime 0x1800c8360
GetTickCount 0x1800c8368
GetVersionExW 0x1800c8378
api-ms-win-core-sysinfo-l1-2-0.dll 2
GetOsSafeBootMode 0x1800c83a0
GetProductInfo 0x1800c8398
api-ms-win-core-threadpool-l1-2-0.dll 8
CloseThreadpoolTimer 0x1800c83b0
CloseThreadpoolWait 0x1800c83c0
CreateThreadpoolTimer 0x1800c83c8
CreateThreadpoolWait 0x1800c83d8
SetThreadpoolTimer 0x1800c83b8
SetThreadpoolWait 0x1800c83e8
WaitForThreadpoolTimerCallbacks 0x1800c83e0
WaitForThreadpoolWaitCallbacks 0x1800c83d0
api-ms-win-core-threadpool-legacy-l1-1-0.dll 2
QueueUserWorkItem 0x1800c8400
UnregisterWaitEx 0x1800c83f8
api-ms-win-core-threadpool-private-l1-1-0.dll 1
RegisterWaitForSingleObjectEx 0x1800c8410
api-ms-win-core-timezone-l1-1-0.dll 2
FileTimeToSystemTime 0x1800c8428
SystemTimeToFileTime 0x1800c8420
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x1800c8438
EventRegister 0x1800c8440
EventSetInformation 0x1800c8458
EventUnregister 0x1800c8448
EventWriteTransfer 0x1800c8450
api-ms-win-security-activedirectoryclient-l1-1-0.dll 4
DsBindWithSpnExW 0x1800c8470
DsCrackNamesW 0x1800c8468
DsFreeNameResultW 0x1800c8478
DsUnBindW 0x1800c8480
api-ms-win-security-base-l1-1-0.dll 34
AccessCheck 0x1800c8590
AccessCheckByType 0x1800c84c0
AddAccessAllowedAce 0x1800c8550
AddAccessAllowedAceEx 0x1800c84e0
AllocateAndInitializeSid 0x1800c84f8
CheckTokenMembership 0x1800c8510
CopySid 0x1800c84a0
CreateWellKnownSid 0x1800c8508
DeleteAce 0x1800c8518
DuplicateTokenEx 0x1800c84b0
EqualSid 0x1800c8598
FreeSid 0x1800c8520
GetAce 0x1800c8558
GetLengthSid 0x1800c8528
GetSecurityDescriptorDacl 0x1800c8538
GetSecurityDescriptorLength 0x1800c84b8
GetSidSubAuthority 0x1800c84c8
GetSidSubAuthorityCount 0x1800c84d0
GetTokenInformation 0x1800c8570
ImpersonateLoggedOnUser 0x1800c8580
InitializeAcl 0x1800c8548
InitializeSecurityDescriptor 0x1800c8560
IsValidSecurityDescriptor 0x1800c8498
IsValidSid 0x1800c84a8
IsWellKnownSid 0x1800c8568
MakeSelfRelativeSD 0x1800c8500
MapGenericMask 0x1800c8490
RevertToSelf 0x1800c8588
SetFileSecurityW 0x1800c84d8
SetSecurityDescriptorControl 0x1800c8530
SetSecurityDescriptorDacl 0x1800c8578
SetSecurityDescriptorGroup 0x1800c84e8
SetSecurityDescriptorOwner 0x1800c84f0
SetTokenInformation 0x1800c8540
api-ms-win-security-grouppolicy-l1-1-0.dll 2
LeaveCriticalPolicySectionInternal 0x1800c85a8
RsopLoggingEnabledInternal 0x1800c85b0
api-ms-win-security-lsalookup-l1-1-0.dll 1
LookupAccountSidLocalW 0x1800c85c0
api-ms-win-security-lsalookup-l1-1-2.dll 1
LsaLookupUserAccountType 0x1800c85d0
msvcrt.dll 57
__C_specific_handler 0x1800c86a8
__CxxFrameHandler3 0x1800c86c0
__dllonexit 0x1800c8680
_amsg_exit 0x1800c8660
_callnewh 0x1800c86d0
_CxxThrowException 0x1800c86f0
_errno 0x1800c8758
_gmtime64 0x1800c8780
_initterm 0x1800c8640
_itow 0x1800c8790
_itow_s 0x1800c8798
_lock 0x1800c8620
_onexit 0x1800c8690
_purecall 0x1800c8678
_time64 0x1800c8778
_tzset 0x1800c8770
_unlock 0x1800c8618
_vsnprintf_s 0x1800c85e8
_vsnwprintf 0x1800c86e8
_wcsicmp 0x1800c8740
_wcsnicmp 0x1800c8700
_wtoi 0x1800c8720
_wtol 0x1800c8608
_XcptFilter 0x1800c8668
??_V@YAXPEAX@Z 0x1800c8688
??0exception@@QEAA@AEBQEBD@Z 0x1800c86f8
??0exception@@QEAA@AEBQEBDH@Z 0x1800c8670
??0exception@@QEAA@AEBV0@@Z 0x1800c85f0
??0exception@@QEAA@XZ 0x1800c8648
??1exception@@UEAA@XZ 0x1800c8650
??1type_info@@UEAA@XZ 0x1800c86a0
??3@YAXPEAX@Z 0x1800c86d8
?terminate@@YAXXZ 0x1800c8698
?what@exception@@UEBAPEBDXZ 0x1800c8628
free 0x1800c8658
iswdigit 0x1800c8610
malloc 0x1800c8638
memcmp 0x1800c85f8
memcpy 0x1800c86b8
memcpy_s 0x1800c86e0
memmove 0x1800c86b0
memmove_s 0x1800c85e0
memset 0x1800c86c8
strchr 0x1800c8750
strtoul 0x1800c8760
swscanf_s 0x1800c8718
toupper 0x1800c8708
vswprintf_s 0x1800c8728
wcschr 0x1800c8768
wcscmp 0x1800c87a0
wcscpy_s 0x1800c8710
wcsftime 0x1800c8788
wcsncmp 0x1800c8600
wcsnlen 0x1800c8738
wcsrchr 0x1800c8730
wcsstr 0x1800c8630
wcstoul 0x1800c8748
nlaapi.dll 16
NlaAddToPluginRequests 0x1800c87d0
NlaAddToTypeSet 0x1800c8818
NlaCloseQuery 0x1800c87e0
NlaCreatePluginRequests 0x1800c87d8
NlaCreateTypeSet 0x1800c8820
NlaDeleteDataSet 0x1800c87f8
NlaDeletePluginRequests 0x1800c87c8
NlaDeleteTypeSet 0x1800c8828
NlaGetInternetCapability 0x1800c87b8
NlaGetIntranetCapability 0x1800c87f0
NlaOpenQuery 0x1800c8810
NlaQueryNetData 0x1800c8800
NlaQueryNetDataEx 0x1800c87b0
NlaQueryNetSignatures 0x1800c8808
NlaRefreshQuery 0x1800c87c0
NlaRegisterQuery 0x1800c87e8
ntdll.dll 27
EtwEventActivityIdControl 0x1800c88a8
EtwEventEnabled 0x1800c88f8
EtwEventRegister 0x1800c8898
EtwEventUnregister 0x1800c8890
EtwEventWrite 0x1800c88a0
NtClose 0x1800c88e8
NtDuplicateToken 0x1800c8838
NtFsControlFile 0x1800c8908
NtOpenFile 0x1800c8868
NtQueryInformationToken 0x1800c88b0
NtQueryLicenseValue 0x1800c88f0
NtQuerySystemTime 0x1800c8860
NtSetInformationProcess 0x1800c8870
RtlAdjustPrivilege 0x1800c8880
RtlConvertSidToUnicodeString 0x1800c88c8
RtlCopySid 0x1800c88d0
RtlCrc32 0x1800c8850
RtlDeriveCapabilitySidsFromName 0x1800c8900
RtlEqualSid 0x1800c8848
RtlFreeUnicodeString 0x1800c88b8
RtlInitUnicodeString 0x1800c88c0
RtlIpv4AddressToStringW 0x1800c8840
RtlLengthSid 0x1800c88d8
RtlNtStatusToDosError 0x1800c88e0
RtlPublishWnfStateData 0x1800c8878
RtlTimeToSecondsSince1980 0x1800c8858
WinSqmSetDWORD 0x1800c8888
RPCRT4.dll 21
Ndr64AsyncServerCallAll 0x1800c7de8
NdrAsyncServerCall 0x1800c7de0
NdrServerCall2 0x1800c7dd8
NdrServerCallAll 0x1800c7d68
RpcAsyncAbortCall 0x1800c7df0
RpcAsyncCompleteCall 0x1800c7e00
RpcBindingToStringBindingW 0x1800c7db8
RpcImpersonateClient 0x1800c7dc8
RpcRaiseException 0x1800c7db0
RpcRevertToSelf 0x1800c7dd0
RpcServerInterfaceGroupActivate 0x1800c7d98
RpcServerInterfaceGroupClose 0x1800c7da8
RpcServerInterfaceGroupCreateW 0x1800c7d90
RpcServerInterfaceGroupDeactivate 0x1800c7da0
RpcServerSubscribeForNotification 0x1800c7df8
RpcServerUnsubscribeForNotification 0x1800c7e08
RpcStringBindingParseW 0x1800c7dc0
RpcStringFreeW 0x1800c7d70
UuidCreate 0x1800c7d80
UuidFromStringW 0x1800c7d78
UuidToStringW 0x1800c7d88
SYSNTFY.dll 2
SysNotifyStartServer 0x1800c7e18
SysNotifyStopServer 0x1800c7e20
UMPDC.dll 5
Pdcv2ActivationClientActivate 0x1800c7e40
Pdcv2ActivationClientDeactivate 0x1800c7e38
Pdcv2ActivationClientRegister 0x1800c7e50
Pdcv2ActivationClientRenewActivation 0x1800c7e30
Pdcv2ActivationClientUnregister 0x1800c7e48