kerberos.dll

v10.0.19041.6328 64-bit Windows NT Analyzed
Description
Kerberos Security Package
Authors
© Microsoft Corporation. All rights reserved.
File size
1.0 MB
Uploaded
2025-12-01 07:31
Views
120
SHA-256
237b9a0be5d17284d7de6354219dc7f3

Exported functions 11

SpInitialize #1 · 0x25790
KerbDomainChangeCallback #2 · 0x50a50
SpLsaModeInitialize #3 · 0x234f0
SpUserModeInitialize #4 · 0x2acc0
DllMain #5 · 0x2f2c0
KerbCreateTokenFromTicketForKdc #6 · 0x61f00
KerbIsInitialized #7 · 0x530a0
KerbKdcCallBack #8 · 0x530b0
KerbMakeKdcCall #9 · 0x6a6b0
Kerberos #10 · 0x130f0
SpInstanceInit #32 · 0x2ae30

Imported DLLs & functions 387

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800e4440
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x1800e4460
IsDebuggerPresent 0x1800e4450
OutputDebugStringA 0x1800e4458
OutputDebugStringW 0x1800e4468
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1800e4488
RaiseException 0x1800e4478
SetLastError 0x1800e4480
SetUnhandledExceptionFilter 0x1800e4490
UnhandledExceptionFilter 0x1800e4498
api-ms-win-core-file-l1-1-0.dll 2
CreateDirectoryW 0x1800e44a8
FileTimeToLocalFileTime 0x1800e44b0
api-ms-win-core-file-l2-1-0.dll 1
MoveFileExW 0x1800e44c0
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1800e44d0
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800e44e0
HeapAlloc 0x1800e44f0
HeapFree 0x1800e44e8
api-ms-win-core-heap-l2-1-0.dll 3
GlobalFree 0x1800e4508
LocalAlloc 0x1800e4510
LocalFree 0x1800e4500
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1800e4520
api-ms-win-core-libraryloader-l1-2-0.dll 8
DisableThreadLibraryCalls 0x1800e4548
FreeLibrary 0x1800e4530
GetModuleFileNameA 0x1800e4540
GetModuleFileNameW 0x1800e4550
GetModuleHandleExW 0x1800e4538
GetModuleHandleW 0x1800e4558
GetProcAddress 0x1800e4568
LoadLibraryExA 0x1800e4560
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x1800e4580
GetACP 0x1800e4578
api-ms-win-core-memory-l1-1-0.dll 7
CreateFileMappingW 0x1800e45b0
MapViewOfFileEx 0x1800e45a0
OpenFileMappingW 0x1800e4598
UnmapViewOfFile 0x1800e45c0
VirtualAlloc 0x1800e45b8
VirtualProtect 0x1800e4590
VirtualQuery 0x1800e45a8
api-ms-win-core-processenvironment-l1-1-0.dll 4
ExpandEnvironmentStringsW 0x1800e45e0
GetCurrentDirectoryW 0x1800e45d8
GetEnvironmentVariableW 0x1800e45d0
SetCurrentDirectoryW 0x1800e45e8
api-ms-win-core-processthreads-l1-1-0.dll 6
GetCurrentProcess 0x1800e4608
GetCurrentProcessId 0x1800e4600
GetCurrentThreadId 0x1800e4620
SetThreadStackGuarantee 0x1800e4610
SetThreadToken 0x1800e4618
TerminateProcess 0x1800e45f8
api-ms-win-core-processthreads-l1-1-1.dll 2
IsProcessorFeaturePresent 0x1800e4630
OpenProcess 0x1800e4638
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800e4648
api-ms-win-core-psapi-l1-1-0.dll 1
QueryFullProcessImageNameW 0x1800e4658
api-ms-win-core-registry-l1-1-0.dll 9
RegCloseKey 0x1800e4698
RegCreateKeyExW 0x1800e4690
RegEnumKeyExW 0x1800e4678
RegEnumValueW 0x1800e4670
RegNotifyChangeKeyValue 0x1800e4668
RegOpenKeyExW 0x1800e4680
RegQueryInfoKeyW 0x1800e46a8
RegQueryValueExW 0x1800e46a0
RegSetValueExW 0x1800e4688
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x1800e46d0
RtlCompareMemory 0x1800e46c0
RtlLookupFunctionEntry 0x1800e46b8
RtlVirtualUnwind 0x1800e46c8
api-ms-win-core-string-l1-1-0.dll 2
MultiByteToWideChar 0x1800e46e0
WideCharToMultiByte 0x1800e46e8
api-ms-win-core-string-obsolete-l1-1-0.dll 4
lstrcmpiA 0x1800e4700
lstrcmpW 0x1800e4710
lstrlenA 0x1800e46f8
lstrlenW 0x1800e4708
api-ms-win-core-synch-l1-1-0.dll 22
AcquireSRWLockExclusive 0x1800e4738
AcquireSRWLockShared 0x1800e4748
CreateEventW 0x1800e47b0
CreateMutexExW 0x1800e4788
CreateSemaphoreExW 0x1800e4798
DeleteCriticalSection 0x1800e4778
EnterCriticalSection 0x1800e4770
InitializeCriticalSection 0x1800e47b8
InitializeCriticalSectionEx 0x1800e4780
InitializeSRWLock 0x1800e47c0
LeaveCriticalSection 0x1800e4768
OpenEventW 0x1800e47a8
OpenSemaphoreW 0x1800e4760
ReleaseMutex 0x1800e4790
ReleaseSemaphore 0x1800e4758
ReleaseSRWLockExclusive 0x1800e4740
ReleaseSRWLockShared 0x1800e4750
ResetEvent 0x1800e4720
SetEvent 0x1800e4728
TryAcquireSRWLockExclusive 0x1800e47c8
WaitForSingleObject 0x1800e4730
WaitForSingleObjectEx 0x1800e47a0
api-ms-win-core-synch-l1-2-0.dll 2
InitOnceExecuteOnce 0x1800e47e0
Sleep 0x1800e47d8
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetComputerNameExW 0x1800e4818
GetSystemInfo 0x1800e4810
GetSystemTimeAsFileTime 0x1800e4808
GetTickCount 0x1800e47f8
GetVersionExW 0x1800e47f0
GetWindowsDirectoryW 0x1800e4800
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x1800e4838
CreateThreadpoolTimer 0x1800e4828
SetThreadpoolTimer 0x1800e4840
WaitForThreadpoolTimerCallbacks 0x1800e4830
api-ms-win-core-threadpool-legacy-l1-1-0.dll 5
ChangeTimerQueueTimer 0x1800e4868
CreateTimerQueueTimer 0x1800e4870
DeleteTimerQueueTimer 0x1800e4850
QueueUserWorkItem 0x1800e4858
UnregisterWaitEx 0x1800e4860
api-ms-win-core-threadpool-private-l1-1-0.dll 1
RegisterWaitForSingleObjectEx 0x1800e4880
api-ms-win-core-timezone-l1-1-0.dll 1
FileTimeToSystemTime 0x1800e4890
api-ms-win-core-version-l1-1-0.dll 3
GetFileVersionInfoExW 0x1800e48b0
GetFileVersionInfoSizeExW 0x1800e48a0
VerQueryValueW 0x1800e48a8
api-ms-win-crt-math-l1-1-0.dll 1
ceilf 0x1800e48c0
api-ms-win-crt-private-l1-1-0.dll 50
__C_specific_handler 0x1800e49a0
__CxxFrameHandler3 0x1800e4a48
__CxxFrameHandler4 0x1800e4a28
__std_terminate 0x1800e4a20
_CxxThrowException 0x1800e4a40
_o___std_exception_copy 0x1800e4a18
_o___std_exception_destroy 0x1800e4a10
_o___std_type_info_destroy_list 0x1800e4a08
_o___stdio_common_vsnprintf_s 0x1800e4a00
_o___stdio_common_vsnwprintf_s 0x1800e49f8
_o___stdio_common_vsprintf_s 0x1800e49f0
_o___stdio_common_vsscanf 0x1800e49e8
_o___stdio_common_vswprintf 0x1800e49e0
_o___stdio_common_vswprintf_s 0x1800e49d8
_o__callnewh 0x1800e49d0
_o__cexit 0x1800e49c8
_o__configure_narrow_argv 0x1800e49c0
_o__crt_atexit 0x1800e49b8
_o__errno 0x1800e49b0
_o__execute_onexit_table 0x1800e49a8
_o__initialize_narrow_environment 0x1800e48d0
_o__initialize_onexit_table 0x1800e48d8
_o__invalid_parameter_noinfo 0x1800e48e0
_o__invalid_parameter_noinfo_noreturn 0x1800e48e8
_o__purecall 0x1800e48f0
_o__register_onexit_function 0x1800e48f8
_o__seh_filter_dll 0x1800e4900
_o__stricmp 0x1800e4908
_o__ultow 0x1800e4910
_o__wcsicmp 0x1800e4918
_o__wcsnicmp 0x1800e4920
_o__wsplitpath_s 0x1800e4930
_o_free 0x1800e4938
_o_malloc 0x1800e4940
_o_qsort 0x1800e4948
_o_strcpy_s 0x1800e4950
_o_toupper 0x1800e4958
_o_towlower 0x1800e4960
_o_wcscat_s 0x1800e4968
_o_wcscpy_s 0x1800e4970
_o_wcsncpy_s 0x1800e4978
_o_wcstok 0x1800e4980
_o_wcstok_s 0x1800e4988
_o_wcstol 0x1800e4990
_o_wcstoul 0x1800e4998
memcmp 0x1800e4a30
memcpy 0x1800e4a38
memmove 0x1800e4928
wcschr 0x1800e4a58
wcsrchr 0x1800e4a50
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1800e4a70
_initterm_e 0x1800e4a68
api-ms-win-crt-string-l1-1-0.dll 4
memset 0x1800e4a80
strcmp 0x1800e4a88
wcscmp 0x1800e4a90
wcsncmp 0x1800e4a98
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x1800e4aa8
GetTraceEnableLevel 0x1800e4ab8
GetTraceLoggerHandle 0x1800e4ab0
RegisterTraceGuidsW 0x1800e4ad0
TraceMessage 0x1800e4ac0
UnregisterTraceGuids 0x1800e4ac8
api-ms-win-eventing-controller-l1-1-0.dll 3
ControlTraceW 0x1800e4af0
EnableTraceEx2 0x1800e4ae0
StartTraceW 0x1800e4ae8
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x1800e4b10
EventRegister 0x1800e4b18
EventSetInformation 0x1800e4b00
EventUnregister 0x1800e4b20
EventWriteTransfer 0x1800e4b08
api-ms-win-security-activedirectoryclient-l1-1-0.dll 4
DsBindWithSpnExW 0x1800e4b40
DsCrackNamesW 0x1800e4b48
DsFreeNameResultW 0x1800e4b38
DsUnBindW 0x1800e4b30
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x1800e4b78
AllocateAndInitializeSid 0x1800e4b90
CheckTokenMembership 0x1800e4b60
EqualSid 0x1800e4b68
FreeSid 0x1800e4b70
GetTokenInformation 0x1800e4b80
IsTokenRestricted 0x1800e4b88
RevertToSelf 0x1800e4b58
api-ms-win-service-private-l1-1-0.dll 1
I_QueryTagInformation 0x1800e4ba0
MSASN1.dll 51
ASN1_CloseDecoder 0x1800e42a0
ASN1_CloseEncoder 0x1800e42b0
ASN1_CreateDecoder 0x1800e4420
ASN1_CreateEncoder 0x1800e4410
ASN1_CreateModule 0x1800e42f8
ASN1_Decode 0x1800e4430
ASN1_Encode 0x1800e42b8
ASN1_FreeDecoded 0x1800e42c8
ASN1_FreeEncoded 0x1800e42d8
ASN1BERDecBitString 0x1800e4328
ASN1BERDecBool 0x1800e43a0
ASN1BERDecCharString 0x1800e42f0
ASN1BERDecEndOfContents 0x1800e43a8
ASN1BERDecExplicitTag 0x1800e43e8
ASN1BERDecGeneralizedTime 0x1800e43d8
ASN1BERDecNotEndOfContents 0x1800e43b8
ASN1BERDecObjectIdentifier 0x1800e4320
ASN1BERDecOctetString 0x1800e43c0
ASN1BERDecOpenType2 0x1800e4408
ASN1BERDecPeekTag 0x1800e43d0
ASN1BERDecS32Val 0x1800e4340
ASN1BERDecSkip 0x1800e4368
ASN1BERDecSXVal 0x1800e4400
ASN1BERDecU32Val 0x1800e4300
ASN1BERDecZeroCharString 0x1800e4310
ASN1BEREncBool 0x1800e4370
ASN1BEREncEndOfContents 0x1800e4378
ASN1BEREncExplicitTag 0x1800e43b0
ASN1BEREncObjectIdentifier 0x1800e4318
ASN1BEREncOpenType 0x1800e4348
ASN1BEREncS32 0x1800e4388
ASN1BEREncSX 0x1800e4350
ASN1BEREncU32 0x1800e43c8
ASN1bitstring_free 0x1800e42e8
ASN1charstring_free 0x1800e4330
ASN1DecAlloc 0x1800e4358
ASN1DecSetError 0x1800e43f0
ASN1DEREncBitString 0x1800e4308
ASN1DEREncCharString 0x1800e4380
ASN1DEREncGeneralizedTime 0x1800e43e0
ASN1DEREncOctetString 0x1800e4338
ASN1EncSetError 0x1800e4390
ASN1Free 0x1800e4360
ASN1intx_free 0x1800e4418
ASN1intx_setuint32 0x1800e4428
ASN1intx2int32 0x1800e42a8
ASN1intx2uint32 0x1800e42d0
ASN1intxisuint32 0x1800e42c0
ASN1objectidentifier_free 0x1800e4398
ASN1octetstring_free 0x1800e43f8
ASN1ztcharstring_free 0x1800e42e0
msvcp_win.dll 35
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z 0x1800e4ca0
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ 0x1800e4c00
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ 0x1800e4c30
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ 0x1800e4bf8
?_Xbad_alloc@std@@YAXXZ 0x1800e4cb8
?_Xlength_error@std@@YAXPEBD@Z 0x1800e4cc0
?_Xout_of_range@std@@YAXPEBD@Z 0x1800e4cb0
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ 0x1800e4c78
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z 0x1800e4c28
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ 0x1800e4c88
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ 0x1800e4c20
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ 0x1800e4bb8
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ 0x1800e4c08
??Bios_base@std@@QEBA_NXZ 0x1800e4bb0
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ 0x1800e4c70
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ 0x1800e4c58
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ 0x1800e4c40
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z 0x1800e4c50
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ 0x1800e4c68
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z 0x1800e4bc0
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ 0x1800e4c60
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ 0x1800e4c10
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ 0x1800e4c98
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z 0x1800e4bd0
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z 0x1800e4c48
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z 0x1800e4c80
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z 0x1800e4c38
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z 0x1800e4c18
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ 0x1800e4c90
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ 0x1800e4bf0
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ 0x1800e4ca8
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ 0x1800e4bc8
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ 0x1800e4be8
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z 0x1800e4be0
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z 0x1800e4bd8
ntdll.dll 102
EtwEventActivityIdControl 0x1800e4f68
EtwEventRegister 0x1800e4fd0
EtwEventUnregister 0x1800e4fc0
EtwEventWriteTransfer 0x1800e4f60
EtwGetTraceLoggerHandle 0x1800e4d58
EtwLogTraceEvent 0x1800e4d80
EtwRegisterTraceGuidsW 0x1800e4d60
EtwTraceMessage 0x1800e4e98
EtwUnregisterTraceGuids 0x1800e4d38
NtAllocateLocallyUniqueId 0x1800e4e88
NtClose 0x1800e4e58
NtCreateEvent 0x1800e4e78
NtDuplicateObject 0x1800e4fa8
NtDuplicateToken 0x1800e4f70
NtOpenEvent 0x1800e4e70
NtOpenProcess 0x1800e4da0
NtOpenProcessToken 0x1800e4f48
NtOpenThreadToken 0x1800e4f58
NtQueryInformationToken 0x1800e4fa0
NtQuerySystemInformation 0x1800e4fb8
NtQuerySystemTime 0x1800e4e10
NtSetEvent 0x1800e4d30
NtSetInformationThread 0x1800e4e00
NtSetSecurityObject 0x1800e4f20
NtWaitForSingleObject 0x1800e4e68
RtlAcquireResourceExclusive 0x1800e4f00
RtlAcquireResourceShared 0x1800e4ee8
RtlAddAccessAllowedAce 0x1800e4f38
RtlAllocateAndInitializeSid 0x1800e4f50
RtlAllocateHeap 0x1800e4d48
RtlAnsiStringToUnicodeString 0x1800e4d78
RtlAppendUnicodeStringToString 0x1800e4db8
RtlAvlInsertNodeEx 0x1800e4da8
RtlAvlRemoveNode 0x1800e4db0
RtlCompareUnicodeString 0x1800e4de0
RtlConvertSharedToExclusive 0x1800e4ed8
RtlCopyLuid 0x1800e4d98
RtlCopySid 0x1800e4f78
RtlCopyUnicodeString 0x1800e4d90
RtlCreateAcl 0x1800e4f40
RtlCreateSecurityDescriptor 0x1800e4f30
RtlCreateTimer 0x1800e4f10
RtlCreateTimerQueue 0x1800e4f18
RtlDeleteCriticalSection 0x1800e4fd8
RtlDeleteElementGenericTable 0x1800e4cd0
RtlDeleteElementGenericTableAvl 0x1800e4ed0
RtlDeleteResource 0x1800e4eb0
RtlDeleteTimerQueue 0x1800e4f08
RtlDeleteTimerQueueEx 0x1800e4ce8
RtlDeregisterWait 0x1800e4e60
RtlDowncaseUnicodeString 0x1800e4e18
RtlDuplicateUnicodeString 0x1800e4d68
RtlEnterCriticalSection 0x1800e4ff0
RtlEnumerateGenericTableAvl 0x1800e4eb8
RtlEqualComputerName 0x1800e4d50
RtlEqualDomainName 0x1800e4ec0
RtlEqualSid 0x1800e4f80
RtlEqualUnicodeString 0x1800e4e28
RtlEraseUnicodeString 0x1800e4d70
RtlFreeAnsiString 0x1800e4dc8
RtlFreeHeap 0x1800e4d40
RtlFreeSid 0x1800e4fb0
RtlFreeUnicodeString 0x1800e4ec8
RtlGetElementGenericTable 0x1800e4ce0
RtlImageNtHeader 0x1800e4cf0
RtlInitAnsiString 0x1800e4dd8
RtlInitializeCriticalSection 0x1800e4fe0
RtlInitializeGenericTable 0x1800e4de8
RtlInitializeGenericTableAvl 0x1800e4ea0
RtlInitializeResource 0x1800e4ea8
RtlInitializeSid 0x1800e4f98
RtlInitUnicodeString 0x1800e4e80
RtlInitUnicodeStringEx 0x1800e4dc0
RtlInsertElementGenericTable 0x1800e4cd8
RtlInsertElementGenericTableAvl 0x1800e4ef8
RtlIntegerToUnicodeString 0x1800e4df0
RtlIpv4AddressToStringExW 0x1800e4e38
RtlIpv4StringToAddressExW 0x1800e4e50
RtlIpv6AddressToStringExW 0x1800e4e30
RtlIpv6StringToAddressExW 0x1800e4e48
RtlLeaveCriticalSection 0x1800e4fe8
RtlLengthRequiredSid 0x1800e4d00
RtlLengthSid 0x1800e4f88
RtlLookupElementGenericTableAvl 0x1800e4ee0
RtlNtStatusToDosError 0x1800e4d28
RtlPrefixUnicodeString 0x1800e4df8
RtlRegisterWait 0x1800e4e40
RtlReleaseResource 0x1800e4ef0
RtlRunDecodeUnicodeString 0x1800e4d88
RtlSetDaclSecurityDescriptor 0x1800e4f28
RtlSubAuthorityCountSid 0x1800e4d08
RtlSubAuthoritySid 0x1800e4f90
RtlSystemTimeToLocalTime 0x1800e4e20
RtlTimeFieldsToTime 0x1800e4d18
RtlTimeToTimeFields 0x1800e4d10
RtlUnicodeStringToAnsiString 0x1800e4dd0
RtlUniform 0x1800e4fc8
RtlUpcaseUnicodeString 0x1800e4e08
RtlValidateUnicodeString 0x1800e4ff8
RtlValidSid 0x1800e4d20
WinSqmIncrementDWORD 0x1800e4e90
WinSqmSetDWORD 0x1800e4cf8