lsasrv.dll
v10.0.19041.6456
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 292
InitializeLsaExtension
#1 · 0x51170
QueryLsaInterface
#2 · 0x72df0
IsTraceLevelEnabled
#3 · 0xfe9f0
LsaDbLookupSidChainRequest
#4 · 0xff3f0
LsaIAddNamesToLogonSession
#5 · 0x18d70
LsaIAdjustTokenObjectIntegrity
#6 · 0x1ecd0
LsaIAdtAuditingEnabledByCategory
#7 · 0x6c4f0
LsaIAdtAuditingEnabledBySubCategory
#8 · 0xe2a20
LsaIAllocateHeap
#9 · 0x4be30
LsaIAllocateHeapZero
#10 · 0x3c370
LsaIAllowProtectedCredLogon
#11 · 0xcdc20
LsaIAuditAccountLogon
#12 · 0xe2b10
LsaIAuditAccountLogonEx
#13 · 0x19d30
LsaIAuditInitializeParametersAndWriteEvent
#14 · 0xe2ef0
LsaIAuditKdcEvent
#15 · 0xe2fc0
LsaIAuditKerberosLogon
#16 · 0xe33a0
LsaIAuditLogonEx
#17 · 0x4c180
LsaIAuditLogonUsingExplicitCreds
#18 · 0x1b150
LsaIAuditNotifyPackageLoad
#19 · 0x72910
LsaIAuditPasswordAccessEvent
#20 · 0xe3440
LsaIAuditReplay
#21 · 0xe3630
LsaIAuditSamEvent
#22 · 0x2e6c0
LsaICallPackage
#23 · 0xd22f0
LsaICallPackageEx
#24 · 0x43280
LsaICallPackagePassthrough
#25 · 0xd2330
LsaICancelNotification
#26 · 0x47ba0
LsaIChangeSecretCipherKey
#27 · 0x100e90
LsaICheckProtectedUserByTokenInfo
#28 · 0x18cd0
LsaICheckRestrictedMode
#29 · 0xe4fb0
LsaIClearOldSyskey
#30 · 0x100f50
LsaICryptProtectData
#31 · 0x48c80
LsaICryptProtectDataEx
#32 · 0xca1c0
LsaICryptUnprotectData
#33 · 0x485c0
LsaICryptUnprotectDataEx
#34 · 0xca270
LsaIDereferenceCredHandle
#35 · 0xd1300
LsaIDeriveCredentialKey
#36 · 0xca320
LsaIDsNotifiedObjectChange
#37 · 0x1016a0
LsaIEfsAcceptSmartcardCredentials
#38 · 0xc2630
LsaIEqualLogonProcessName
#39 · 0xd2460
LsaIEqualSupplementalTokenInfo
#40 · 0x44c0
LsaIEventWritePackageNoCredential
#41 · 0xc6680
LsaIEventWritePackageNotCacheLogonUser
#42 · 0x30520
LsaIExtractTargetInfo
#43 · 0x79a10
LsaIFilterInboundNamespace
#44 · 0x7d2b0
LsaIFilterNamespace
#45 · 0x101740
LsaIFilterSids
#46 · 0x102780
LsaIFlushIdentityCacheForSid
#47 · 0xe4fd0
LsaIForestTrustFindMatch
#48 · 0x1017d0
LsaIFreeFilterInboundNamespaceResult
#49 · 0x7d340
LsaIFreeForestTrustInfo
#50 · 0x101830
LsaIFreeHeap
#51 · 0x2f2f0
LsaIFreeReturnBuffer
#52 · 0x43210
LsaIFreeSupplementalTokenInfo
#53 · 0x47d30
LsaIFree_LSAI_PRIVATE_DATA
#54 · 0xe52f0
LsaIFree_LSAI_SECRET_ENUM_BUFFER
#55 · 0xe5320
LsaIFree_LSAPR_ACCOUNT_ENUM_BUFFER
#56 · 0xe5390
LsaIFree_LSAPR_CR_CIPHER_VALUE
#57 · 0x3d0d0
LsaIFree_LSAPR_POLICY_DOMAIN_INFORMATION
#58 · 0xe53b0
LsaIFree_LSAPR_POLICY_INFORMATION
#59 · 0x3cf80
LsaIFree_LSAPR_PRIVILEGE_ENUM_BUFFER
#60 · 0xe53e0
LsaIFree_LSAPR_PRIVILEGE_SET
#61 · 0xe52f0
LsaIFree_LSAPR_REFERENCED_DOMAIN_LIST
#62 · 0x4d2e0
LsaIFree_LSAPR_SR_SECURITY_DESCRIPTOR
#63 · 0xe5400
LsaIFree_LSAPR_TRANSLATED_NAMES
#64 · 0x72160
LsaIFree_LSAPR_TRANSLATED_SIDS
#65 · 0xe5440
LsaIFree_LSAPR_TRUSTED_DOMAIN_INFO
#66 · 0xe5470
LsaIFree_LSAPR_TRUSTED_ENUM_BUFFER
#67 · 0xe54b0
LsaIFree_LSAPR_TRUSTED_ENUM_BUFFER_EX
#68 · 0xe54d0
LsaIFree_LSAPR_TRUST_INFORMATION
#69 · 0xe54f0
LsaIFree_LSAPR_UNICODE_STRING
#70 · 0xe5400
LsaIFree_LSAPR_UNICODE_STRING_BUFFER
#71 · 0xe5440
LsaIFree_LSAP_SITENAME_INFO
#72 · 0x103440
LsaIFree_LSAP_SITE_INFO
#73 · 0x1034a0
LsaIFree_LSAP_SUBNET_INFO
#74 · 0x103520
LsaIFree_LSAP_UPN_SUFFIXES
#75 · 0x1034a0
LsaIFree_LSA_FOREST_TRUST_COLLISION_INFORMATION
#76 · 0x101870
LsaIFree_LSA_FOREST_TRUST_INFORMATION
#77 · 0x1018b0
LsaIGetCallInfo
#78 · 0x20ba0
LsaIGetCcgClient
#79 · 0xb4a00
LsaIGetClientOsInfo
#80 · 0x7d350
LsaIGetForestTrustInformation
#81 · 0x1018f0
LsaIGetLogonGuid
#82 · 0xe3b60
LsaIGetNameFromLuid
#83 · 0xc67a0
LsaIGetNbAndDnsDomainNames
#84 · 0x46b50
LsaIGetNego2Package
#85 · 0x703b0
LsaIGetRemoteCredGuardLogonBuffer
#86 · 0xd24c0
LsaIGetRemoteCredGuardSupplementalCreds
#87 · 0xd2590
LsaIGetSiteName
#88 · 0x101940
LsaIGetSupplementalTokenInfo
#89 · 0x45400
LsaIGetTokenInformationForLocalUser
#90 · 0xe4ff0
LsaIHealthCheck
#91 · 0x715a0
LsaIImpersonateClient
#92 · 0x48f00
LsaIInitializeNetlogonFuncPtrs
#93 · 0xe5520
LsaIIsContainerized
#94 · 0xb4a10
LsaIIsDomainWithinForest
#95 · 0x101990
LsaIIsDsPaused
#96 · 0x101a30
LsaIIsInEmulatedDomainJoinMode
#97 · 0x48bb0
LsaIIsLastInteractiveLogonInfoEnabled
#98 · 0x48fc0
LsaIIsLocalHost
#99 · 0xceb80
LsaIIsMachineSecureByDefault
#100 · 0xe5540
LsaIIsSuppressChannelBindingInfo
#101 · 0xcf8e0
LsaIIsTargetPrivate
#102 · 0xd44a0
LsaIIsTrustedDomainsEnabled
#103 · 0x101a70
LsaIIsUserMSA
#104 · 0xe5000
LsaIKerberosRegisterTrustNotification
#105 · 0x101a80
LsaILookupUserAccountType
#106 · 0x489d0
LsaILookupWellKnownName
#107 · 0x103710
LsaIModifyPerformanceCounter
#108 · 0x3be50
LsaINoConnectedUserPolicy
#109 · 0x46e70
LsaINoMoreWin2KDomain
#110 · 0x48e70
LsaINotifyChangeNotification
#111 · 0x104950
LsaINotifyGCStatusChange
#112 · 0x101ad0
LsaINotifyNetlogonParametersChangeW
#113 · 0x1035d0
LsaINotifyNewPassword
#114 · 0xbf9d0
LsaINotifyPasswordChanged
#115 · 0xbf9e0
LsaIOpenPolicyTrusted
#116 · 0x72530
LsaIQueryForestTrustInfo
#117 · 0x101b10
LsaIQueryForestTrustInformation
#118 · 0x101b70
LsaIQueryInformationPolicyTrusted
#119 · 0x48b90
LsaIQueryPackageAttrInLogonSession
#120 · 0x45350
LsaIQuerySiteInfo
#121 · 0x101ba0
LsaIQuerySubnetInfo
#122 · 0x101bf0
LsaIQueryUpnSuffixes
#123 · 0x101c40
LsaIReferenceCredHandle
#124 · 0xd1340
LsaIRegisterLogonSessionCallback
#125 · 0x48ea0
LsaIRegisterNotification
#126 · 0x5b970
LsaIRegisterPolicyChangeNotificationCallback
#127 · 0x6b590
LsaIRenewCertificate
#128 · 0xe5020
LsaIReplicateClientObject
#129 · 0x101c90
LsaIRetrieveCurrentUserSid
#130 · 0x3d4f0
LsaISafeMode
#131 · 0x56550
LsaISamIndicatedDsStarted
#132 · 0x101cf0
LsaISanitizeSAMName
#133 · 0xe5040
LsaISetClientDnsHostName
#134 · 0x101d40
LsaISetLogonGuidInLogonSession
#135 · 0xc6900
LsaISetLogonInfo
#136 · 0x47980
LsaISetNewSyskey
#137 · 0x100fa0
LsaISetPackageAttrInLogonSession
#138 · 0xc6af0
LsaISetSupplementalTokenInfo
#139 · 0x4be60
LsaISetTokenDacl
#140 · 0xe55b0
LsaISetUserFlags
#141 · 0x44ba0
LsaITransformAuthorizationData
#142 · 0x1068e0
LsaIUnregisterAllPolicyChangeNotificationCallback
#143 · 0x104a00
LsaIUnregisterLogonSessionCallback
#144 · 0xc6ba0
LsaIUnregisterPolicyChangeNotificationCallback
#145 · 0x104b70
LsaIUpdateForestTrustInformation
#146 · 0x101de0
LsaIUpdateKerbMaxTokenSize
#147 · 0xcebc0
LsaIUpdateLogonSession
#148 · 0x2a30
LsaIValidateTargetInfo
#149 · 0xd2650
LsaIVerifyCachability
#150 · 0x101e50
LsaIVerifyCachabilityEx
#151 · 0x7d3d0
LsaIWasLogonNotifiedOfProfileLoad
#152 · 0x7b130
LsaIWriteAuditEvent
#153 · 0xe3cb0
LsaIWriteKdcAuthenticationEvent
#154 · 0xe3d70
LsaLookupPerfCounterAddAmount
#155 · 0x7b6b0
LsaLookupPerfCounterAddLargeAmount
#156 · 0x7b720
LsaLookupPerfCounterDecrementCount
#157 · 0x7b790
LsaLookupPerfCounterDecrementLargeCount
#158 · 0x7b800
LsaLookupPerfCounterIncrementCount
#159 · 0x7b870
LsaLookupPerfCounterIncrementLargeCount
#160 · 0x7b8e0
LsapAdtAuditingEnabledByLogonId
#161 · 0x1e1f0
LsapAdtAuditingEnabledBySubCategory
#162 · 0x1e2b0
LsapAdtAuditingEnabledHint
#163 · 0xe6ac0
LsapAdtGetCallerProcessInfo
#164 · 0x30f80
LsapAdtInitParametersArray
#165 · 0x1ae70
LsapAdtWriteLog
#166 · 0x4b2b0
LsapAllocateLsaHeap
#167 · 0x3c370
LsapAllocatePrivateHeap
#168 · 0x3c370
LsapAuOpenSam
#169 · 0x525e0
LsapAuditFailed
#170 · 0xe7250
LsapBuildPrivilegeAuditString
#171 · 0x106a90
LsapCheckBootMode
#172 · 0x51830
LsapCloseHandle
#173 · 0x44730
LsapCompareDomainNames
#174 · 0x5410
LsapCrServerGetSessionKey
#175 · 0x4eab0
LsapCrServerGetSessionKeySafe
#176 · 0xe8670
LsapDbAcquireLockEx
#177 · 0x12760
LsapDbApplyTransaction
#178 · 0x444c0
LsapDbBuildObjectCaches
#179 · 0x558c0
LsapDbCloseHandle
#180 · 0x1088c0
LsapDbCloseObject
#181 · 0x44820
LsapDbCopyUnicodeAttribute
#182 · 0x56310
LsapDbCopyUnicodeAttributeNoAlloc
#183 · 0x109ec0
LsapDbCreateObject
#184 · 0x108b40
LsapDbDeleteAttributesObject
#185 · 0x109040
LsapDbDeleteObject
#186 · 0x1090e0
LsapDbDereferenceHandle
#187 · 0x13270
LsapDbDereferenceObject
#188 · 0x11fa0
LsapDbEnumerateSids
#189 · 0x56c10
LsapDbEnumerateTrustedDomainsEx
#190 · 0x10acc0
LsapDbExpAcquireReadLockTrustedDomainList
#191 · 0x10b8a0
LsapDbExpAcquireWriteLockTrustedDomainList
#192 · 0x10b8d0
LsapDbExpConvertReadLockTrustedDomainListToExclusive
#193 · 0x10b900
LsapDbExpConvertWriteLockTrustedDomainListToShared
#194 · 0x10b920
LsapDbExpIsCacheBuilding
#195 · 0x10b940
LsapDbExpIsCacheValid
#196 · 0x10b960
LsapDbExpIsLockedTrustedDomainList
#197 · 0x10b980
LsapDbExpMakeCacheBuilding
#198 · 0x10b9d0
LsapDbExpMakeCacheInvalid
#199 · 0x10b9f0
LsapDbExpMakeCacheValid
#200 · 0x10ba10
LsapDbExpReleaseLockTrustedDomainList
#201 · 0x10ba30
LsapDbFreeAttributes
#202 · 0x54f90
LsapDbFreeTrustedDomainsEx
#203 · 0x10ae70
LsapDbGetDbObjectTypeName
#204 · 0x10ba50
LsapDbGetDbPolicyHandle
#205 · 0x10ba70
LsapDbGetSecretType
#206 · 0x44530
LsapDbInitializeAttribute
#207 · 0x4e110
LsapDbIsStatusConnectionFailure
#208 · 0xff900
LsapDbLookupAddListReferencedDomains
#209 · 0xbd80
LsapDbLookupCreateListReferencedDomains
#210 · 0xff930
LsapDbLookupGetDomainInfo
#211 · 0x46530
LsapDbLookupListReferencedDomains
#212 · 0x5790
LsapDbLookupMergeDisjointReferencedDomains
#213 · 0xfff50
LsapDbLookupNameChainRequest
#214 · 0x1001f0
LsapDbLookupNamesInPrimaryDomain
#215 · 0x103c40
LsapDbLookupSidsInPrimaryDomain
#216 · 0x10a650
LsapDbMakeGuidAttribute
#217 · 0x109f30
LsapDbMakeSidAttribute
#218 · 0x109f90
LsapDbMakeUnicodeAttribute
#219 · 0x10a020
LsapDbOpenObject
#220 · 0x10750
LsapDbQueryInformationPolicy
#221 · 0xddb0
LsapDbReadAttribute
#222 · 0x550e0
LsapDbReadAttributesObject
#223 · 0x4dfc0
LsapDbReferenceObject
#224 · 0x13710
LsapDbReleaseLockEx
#225 · 0x105f0
LsapDbSecretIsMachineAcc
#226 · 0x10bbc0
LsapDbSidToLogicalNameObject
#227 · 0x44470
LsapDbSlowEnumerateTrustedDomains
#228 · 0x10b010
LsapDbUpdateCountCompUnmappedNames
#229 · 0x1041e0
LsapDbVerifyHandle
#230 · 0x138f0
LsapDbVerifyInfoQueryTrustedDomain
#231 · 0x10ba80
LsapDbVerifyInfoSetTrustedDomain
#232 · 0x10baa0
LsapDbWriteAttributesObject
#233 · 0x1094a0
LsapDomainRenameHandlerForLogonSessions
#234 · 0xc82b0
LsapDsInitializeDsStateInfo
#235 · 0x101e80
LsapDsUnitializeDsStateInfo
#236 · 0x101ec0
LsapDssetupInitializeGetPrimaryDomainInformationOpState
#237 · 0xe5550
LsapDuplicateSid
#238 · 0x18770
LsapDuplicateString
#239 · 0x17ec0
LsapFreeLsaHeap
#240 · 0x2f2f0
LsapFreePrivateHeap
#241 · 0x2f2f0
LsapFreeString
#242 · 0x18480
LsapGetAccountDomainHandle
#243 · 0x10bac0
LsapGetCapeNamesForCap
#244 · 0xe8850
LsapGetGlobalRestrictAnonymous
#245 · 0x10bad0
LsapGetHourlyLogLevel
#246 · 0x10bae0
LsapGetLogonSessionAccountInfoEx
#247 · 0x17430
LsapGetLookupRestrictIsolatedNameLevel
#248 · 0x100950
LsapGetPolicyHandle
#249 · 0x10baf0
LsapGetWellKnownSid
#250 · 0x10bb10
LsapInitLsa
#251 · 0x5cf40
LsapInitializeLsaDb
#252 · 0x10bb30
LsapIsBuiltinDomain
#253 · 0x100960
LsapIsSamOpened
#254 · 0x10bbb0
LsapOpenSam
#255 · 0xe55a0
LsapQueryClientInfo
#256 · 0x2f320
LsapRemoveTrailingDot
#257 · 0xb3640
LsapRpcCopySid
#258 · 0x56b0
LsapRpcCopyUnicodeString
#259 · 0x4790
LsapRtlValidateControllerTrustedDomain
#260 · 0x1009a0
LsapRtlValidateControllerTrustedDomainByHandle
#261 · 0x100b40
LsapSetErrorInfo
#262 · 0xca4b0
LsapSidListSize
#263 · 0xe7550
LsapTraceEvent
#264 · 0x44860
LsapTraceEventWithData
#265 · 0x11f30
LsapTruncateUnicodeString
#266 · 0xb3680
LsarClose
#267 · 0x11d00
LsarCreateSecret
#268 · 0x10c500
LsarDeleteObject
#269 · 0x1068a0
LsarEnumerateTrustedDomainsEx
#270 · 0x10b270
LsarLookupSids
#271 · 0x4d3b0
LsarOpenPolicy
#272 · 0x105c50
LsarOpenSecret
#273 · 0x43de0
LsarQueryDomainInformationPolicy
#274 · 0x10cf20
LsarQueryInformationPolicy
#275 · 0x128e0
LsarQuerySecret
#276 · 0x4d970
LsarQueryTrustedDomainInfoByName
#277 · 0x10b3e0
LsarRetrievePrivateData
#278 · 0x10def0
LsarSetInformationPolicy
#279 · 0x106010
LsarSetSecret
#280 · 0x10c7f0
LsarSetTrustedDomainInfoByName
#281 · 0x10b6a0
LsarStorePrivateData
#282 · 0x10dfa0
ServiceInit
#283 · 0x516f0
SpmpEventWrite
#284 · 0x32bb0
TracePrint
#285 · 0x9c10
TracePrintCallerInformation
#286 · 0xfee70
_fgs__LSAPR_TRUSTED_DOMAIN_FULL_INFORMATION2
#287 · 0xe9ae0
_fgs__LSAPR_TRUSTED_DOMAIN_INFORMATION_EX2
#288 · 0xe9b60
_fgs__LSAPR_TRUSTED_ENUM_BUFFER
#289 · 0x4d310
_fgs__LSAPR_TRUSTED_ENUM_BUFFER_EX
#290 · 0xe9bc0
_fgs__LSAPR_TRUST_INFORMATION
#291 · 0x4d370
_fgu__LSAPR_TRUSTED_DOMAIN_INFO
#292 · 0xe9c80
No function matches your filter.
Imported DLLs & functions 630
ApiSetQueryApiSetPresence
0x18014cdb8
SetConsoleCtrlHandler
0x18014cdc8
DebugBreak
0x18014cdf8
IsDebuggerPresent
0x18014ce08
OutputDebugStringA
0x18014cdf0
OutputDebugStringW
0x18014ce00
DelayLoadFailureHook
0x18014ce18
ResolveDelayLoadedAPI
0x18014ce28
GetLastError
0x18014ce58
RaiseException
0x18014ce48
SetLastError
0x18014ce50
SetUnhandledExceptionFilter
0x18014ce38
UnhandledExceptionFilter
0x18014ce40
RaiseFailFastException
0x18014ce68
CompareFileTime
0x18014ced0
CreateDirectoryW
0x18014cec0
CreateFileW
0x18014cea8
DeleteFileW
0x18014ce98
FileTimeToLocalFileTime
0x18014cf08
FindClose
0x18014cee8
FindCloseChangeNotification
0x18014cec8
FindFirstChangeNotificationW
0x18014ced8
FindFirstFileExW
0x18014cee0
FindFirstFileW
0x18014ce80
FindNextChangeNotification
0x18014ceb8
FindNextFileW
0x18014ce78
GetFileSize
0x18014cf00
GetFileSizeEx
0x18014cef8
GetFileType
0x18014cea0
ReadFile
0x18014ce88
SetFileAttributesW
0x18014ceb0
SetFilePointer
0x18014cef0
WriteFile
0x18014ce90
CloseHandle
0x18014cf30
GetProcessHeap
0x18014cf58
HeapAlloc
0x18014cf40
HeapFree
0x18014cf50
HeapSetInformation
0x18014cf48
InitializeSListHead
0x18014cf80
GetOverlappedResult
0x18014cf90
CancelIo
0x18014cfa0
DnsHostnameToComputerNameW
0x18014cfc0
MoveFileW
0x18014cfb0
WTSGetActiveConsoleSessionId
0x18014cfb8
CheckElevationEnabled
0x18014cfd0
DisableThreadLibraryCalls
0x18014cfe0
FreeLibrary
0x18014d010
GetModuleFileNameA
0x18014cff8
GetModuleFileNameW
0x18014d020
GetModuleHandleExW
0x18014cfe8
GetModuleHandleW
0x18014cff0
GetProcAddress
0x18014d008
LoadLibraryExA
0x18014d018
LoadLibraryExW
0x18014d000
FormatMessageW
0x18014d030
VirtualAlloc
0x18014d040
VirtualFree
0x18014d058
VirtualProtect
0x18014d050
VirtualQuery
0x18014d048
VirtualLock
0x18014d068
PerfCreateInstance
0x18014d080
PerfSetCounterRefValue
0x18014d090
PerfSetCounterSetInfo
0x18014d088
PerfStartProviderEx
0x18014d098
PerfStopProvider
0x18014d078
GetProfileStringA
0x18014d0a8
ExpandEnvironmentStringsW
0x18014d0b8
GetEnvironmentVariableW
0x18014d0c0
SearchPathW
0x18014d0c8
CreateThread
0x18014d0d8
GetCurrentProcess
0x18014d148
GetCurrentProcessId
0x18014d100
GetCurrentThread
0x18014d120
GetCurrentThreadId
0x18014d0f0
GetProcessTimes
0x18014d110
OpenProcessToken
0x18014d0e0
OpenThreadToken
0x18014d138
SetProcessShutdownParameters
0x18014d108
SetThreadStackGuarantee
0x18014d0f8
SetThreadToken
0x18014d140
TerminateProcess
0x18014d118
TlsAlloc
0x18014d0e8
TlsGetValue
0x18014d130
TlsSetValue
0x18014d128
GetProcessMitigationPolicy
0x18014d160
IsProcessorFeaturePresent
0x18014d168
OpenProcess
0x18014d158
QueryPerformanceCounter
0x18014d180
QueryPerformanceFrequency
0x18014d178
QueryFullProcessImageNameW
0x18014d190
RegCloseKey
0x18014d230
RegCreateKeyExA
0x18014d1e8
RegCreateKeyExW
0x18014d248
RegDeleteKeyExA
0x18014d1c8
RegDeleteKeyExW
0x18014d238
RegDeleteTreeW
0x18014d1f8
RegDeleteValueW
0x18014d1a8
RegEnumKeyExW
0x18014d200
RegEnumValueW
0x18014d1a0
RegFlushKey
0x18014d1d0
RegGetValueW
0x18014d220
RegLoadKeyW
0x18014d210
RegNotifyChangeKeyValue
0x18014d1d8
RegOpenKeyExA
0x18014d1f0
RegOpenKeyExW
0x18014d218
RegQueryInfoKeyA
0x18014d1b8
RegQueryInfoKeyW
0x18014d1b0
RegQueryValueExA
0x18014d1e0
RegQueryValueExW
0x18014d240
RegSetValueExA
0x18014d1c0
RegSetValueExW
0x18014d228
RegUnLoadKeyW
0x18014d208
RegSetKeyValueW
0x18014d258
RtlCaptureContext
0x18014d268
RtlLookupFunctionEntry
0x18014d270
RtlVirtualUnwind
0x18014d278
AcquireSRWLockExclusive
0x18014d360
AcquireSRWLockShared
0x18014d340
CreateEventW
0x18014d2f0
CreateMutexExW
0x18014d320
CreateSemaphoreExW
0x18014d2f8
DeleteCriticalSection
0x18014d350
EnterCriticalSection
0x18014d338
InitializeCriticalSection
0x18014d308
InitializeCriticalSectionEx
0x18014d310
InitializeSRWLock
0x18014d2d0
LeaveCriticalSection
0x18014d318
OpenEventW
0x18014d348
OpenSemaphoreW
0x18014d2c0
ReleaseMutex
0x18014d2d8
ReleaseSemaphore
0x18014d358
ReleaseSRWLockExclusive
0x18014d2c8
ReleaseSRWLockShared
0x18014d2e0
ResetEvent
0x18014d2b8
SetEvent
0x18014d328
TryAcquireSRWLockExclusive
0x18014d300
WaitForSingleObject
0x18014d2e8
WaitForSingleObjectEx
0x18014d330
GetComputerNameExW
0x18014d398
GetLocalTime
0x18014d3d0
GetSystemDirectoryW
0x18014d3b0
GetSystemInfo
0x18014d3a8
GetSystemTime
0x18014d390
GetSystemTimeAsFileTime
0x18014d3c0
GetSystemWindowsDirectoryW
0x18014d3b8
GetTickCount
0x18014d3a0
GetTickCount64
0x18014d3c8
GetWindowsDirectoryW
0x18014d388
VerSetConditionMask
0x18014d3e0
CloseThreadpoolTimer
0x18014d418
CloseThreadpoolWait
0x18014d400
CreateThreadpoolTimer
0x18014d408
CreateThreadpoolWait
0x18014d420
SetThreadpoolTimer
0x18014d3f0
SetThreadpoolWait
0x18014d3f8
WaitForThreadpoolTimerCallbacks
0x18014d410
CreateTimerQueueTimer
0x18014d440
DeleteTimerQueueTimer
0x18014d438
QueueUserWorkItem
0x18014d448
UnregisterWaitEx
0x18014d430
RegisterWaitForSingleObjectEx
0x18014d458
FileTimeToSystemTime
0x18014d470
SystemTimeToFileTime
0x18014d468
__C_specific_handler
0x18014d5f8
__CxxFrameHandler3
0x18014d568
__CxxFrameHandler4
0x18014d578
__std_terminate
0x18014d570
_CxxThrowException
0x18014d560
_local_unwind
0x18014d610
_o___std_exception_copy
0x18014d5f0
_o___std_exception_destroy
0x18014d5e8
_o___std_type_info_destroy_list
0x18014d5e0
_o___stdio_common_vsnprintf_s
0x18014d5d8
_o___stdio_common_vsnwprintf_s
0x18014d5d0
_o___stdio_common_vswprintf
0x18014d5c8
_o___stdio_common_vswprintf_s
0x18014d5c0
_o___stdio_common_vswscanf
0x18014d5b8
_o__callnewh
0x18014d5b0
_o__cexit
0x18014d5a8
_o__configure_narrow_argv
0x18014d590
_o__crt_atexit
0x18014d580
_o__errno
0x18014d558
_o__execute_onexit_table
0x18014d550
_o__initialize_narrow_environment
0x18014d5a0
_o__initialize_onexit_table
0x18014d598
_o__invalid_parameter_noinfo
0x18014d588
_o__purecall
0x18014d480
_o__register_onexit_function
0x18014d488
_o__seh_filter_dll
0x18014d490
_o__stricmp
0x18014d498
_o__ultow
0x18014d4a0
_o__ultow_s
0x18014d4a8
_o__wcsicmp
0x18014d4b0
_o__wcsnicmp
0x18014d4b8
_o__wsplitpath_s
0x18014d4c0
_o__wtoi
0x18014d4c8
_o__wtol
0x18014d4d0
_o_bsearch_s
0x18014d4d8
_o_free
0x18014d4e0
_o_malloc
0x18014d4f0
_o_mbstowcs
0x18014d4f8
_o_memcpy_s
0x18014d500
_o_qsort
0x18014d508
_o_qsort_s
0x18014d510
_o_strtok
0x18014d518
_o_toupper
0x18014d520
_o_wcscat_s
0x18014d528
_o_wcscpy_s
0x18014d530
_o_wcsncat_s
0x18014d538
_o_wcsncpy_s
0x18014d540
_o_wcstoul
0x18014d548
memcmp
0x18014d618
memcpy
0x18014d620
memmove
0x18014d4e8
wcschr
0x18014d608
wcsrchr
0x18014d600
TraceMessage
0x18014d668
ControlTraceW
0x18014d688
EnableTraceEx2
0x18014d678
StartTraceW
0x18014d680
EventActivityIdControl
0x18014d6c0
EventProviderEnabled
0x18014d6a0
EventRegister
0x18014d6b8
EventSetInformation
0x18014d698
EventUnregister
0x18014d6a8
EventWriteTransfer
0x18014d6b0
AccessCheck
0x18014d780
AdjustTokenPrivileges
0x18014d748
AllocateAndInitializeSid
0x18014d718
AllocateLocallyUniqueId
0x18014d708
CheckTokenMembership
0x18014d7a8
CopySid
0x18014d740
CreateWellKnownSid
0x18014d7a0
DuplicateToken
0x18014d788
DuplicateTokenEx
0x18014d710
EqualDomainSid
0x18014d758
FreeSid
0x18014d700
GetAclInformation
0x18014d720
GetLengthSid
0x18014d7b0
GetSidIdentifierAuthority
0x18014d6f8
GetSidSubAuthority
0x18014d6e8
GetSidSubAuthorityCount
0x18014d6f0
GetTokenInformation
0x18014d6d8
GetWindowsAccountDomainSid
0x18014d750
ImpersonateLoggedOnUser
0x18014d798
ImpersonateSelf
0x18014d778
InitializeSecurityDescriptor
0x18014d728
IsTokenRestricted
0x18014d6d0
IsValidSid
0x18014d770
IsWellKnownSid
0x18014d6e0
PrivilegeCheck
0x18014d738
QuerySecurityAccessMask
0x18014d760
RevertToSelf
0x18014d7b8
SetSecurityAccessMask
0x18014d768
SetSecurityDescriptorSacl
0x18014d730
SetTokenInformation
0x18014d790
CheckTokenMembershipEx
0x18014d7c8
CreateAppContainerToken
0x18014d7d8
CapabilityCheck
0x18014d7e8
IsSyncForegroundPolicyRefresh
0x18014d7f8
SetServiceStatus
0x18014d808
StartServiceCtrlDispatcherW
0x18014d810
I_QueryTagInformation
0x18014d828
I_ScIsSecurityProcess
0x18014d820
RegisterServiceCtrlHandlerW
0x18014d838
GetPersistedRegistryLocationW
0x18014d848
MSASN1.dll
35
ASN1_CloseDecoder
0x18014cad8
ASN1_CloseEncoder
0x18014cad0
ASN1_CreateDecoder
0x18014cac8
ASN1_CreateEncoder
0x18014cac0
ASN1_CreateModule
0x18014caa8
ASN1_Decode
0x18014cae0
ASN1_Encode
0x18014cae8
ASN1_FreeDecoded
0x18014caf0
ASN1_FreeEncoded
0x18014caf8
ASN1BERDecBitString
0x18014ca78
ASN1BERDecEndOfContents
0x18014ca30
ASN1BERDecExplicitTag
0x18014ca00
ASN1BERDecNotEndOfContents
0x18014ca20
ASN1BERDecObjectIdentifier
0x18014ca80
ASN1BERDecOctetString
0x18014ca18
ASN1BERDecPeekTag
0x18014ca08
ASN1BERDecSkip
0x18014ca58
ASN1BERDecU32Val
0x18014caa0
ASN1BERDecZeroCharString
0x18014ca90
ASN1BEREncEndOfContents
0x18014ca50
ASN1BEREncExplicitTag
0x18014ca28
ASN1BEREncObjectIdentifier
0x18014ca88
ASN1BEREncRemoveZeroBits
0x18014c9f0
ASN1BEREncU32
0x18014ca10
ASN1bitstring_free
0x18014cab0
ASN1DecAlloc
0x18014ca68
ASN1DecSetError
0x18014c9f8
ASN1DEREncBitString
0x18014ca98
ASN1DEREncCharString
0x18014ca48
ASN1DEREncOctetString
0x18014ca70
ASN1EncSetError
0x18014ca40
ASN1Free
0x18014ca60
ASN1objectidentifier_free
0x18014ca38
ASN1octetstring_free
0x18014cb00
ASN1ztcharstring_free
0x18014cab8
ntdll.dll
231
_strcmpi
0x18014dd48
DbgPrint
0x18014d870
EtwEventActivityIdControl
0x18014dcf0
EtwEventEnabled
0x18014d890
EtwEventRegister
0x18014dde8
EtwEventSetInformation
0x18014ddf0
EtwEventUnregister
0x18014dac0
EtwEventWrite
0x18014dab8
EtwEventWriteTransfer
0x18014df20
EtwGetTraceEnableFlags
0x18014ddf8
EtwGetTraceEnableLevel
0x18014de00
EtwGetTraceLoggerHandle
0x18014dc80
EtwLogTraceEvent
0x18014dc78
EtwRegisterSecurityProvider
0x18014dd60
EtwRegisterTraceGuidsW
0x18014dc88
EtwTraceMessage
0x18014dc98
EtwWriteUMSecurityEvent
0x18014dd68
LdrLoadDll
0x18014dae8
NtAccessCheck
0x18014da88
NtAccessCheckAndAuditAlarm
0x18014da68
NtAccessCheckByTypeAndAuditAlarm
0x18014db10
NtAdjustPrivilegesToken
0x18014da30
NtAllocateLocallyUniqueId
0x18014dea8
NtAllocateVirtualMemory
0x18014dcb8
NtClose
0x18014dbe0
NtCloseObjectAuditAlarm
0x18014db08
NtCommitTransaction
0x18014d9b0
NtCreateEvent
0x18014ddc0
NtCreateKey
0x18014da18
NtCreateKeyTransacted
0x18014da10
NtCreateSection
0x18014d8d0
NtCreateToken
0x18014d8f8
NtCreateTokenEx
0x18014d910
NtCreateTransaction
0x18014d9a8
NtDeleteKey
0x18014da08
NtDeleteObjectAuditAlarm
0x18014dac8
NtDeleteValueKey
0x18014da20
NtDuplicateObject
0x18014dee8
NtDuplicateToken
0x18014dc48
NtEnumerateKey
0x18014d9e8
NtEnumerateValueKey
0x18014d978
NtFilterToken
0x18014d950
NtFlushKey
0x18014d928
NtFreeVirtualMemory
0x18014db60
NtImpersonateAnonymousToken
0x18014de78
NtLoadKey
0x18014df58
NtMapViewOfSection
0x18014d8d8
NtOpenEvent
0x18014ddb8
NtOpenKey
0x18014d918
NtOpenKeyTransacted
0x18014d9f0
NtOpenProcess
0x18014dcc0
NtOpenProcessToken
0x18014da38
NtOpenSession
0x18014db98
NtOpenSymbolicLinkObject
0x18014dd50
NtOpenThreadToken
0x18014dc68
NtPrivilegeCheck
0x18014daf8
NtPrivilegedServiceAuditAlarm
0x18014d878
NtPrivilegeObjectAuditAlarm
0x18014d930
NtQueryInformationProcess
0x18014dcc8
NtQueryInformationToken
0x18014dc60
NtQueryKey
0x18014da00
NtQueryObject
0x18014dab0
NtQuerySymbolicLinkObject
0x18014dd58
NtQuerySystemInformation
0x18014dcd0
NtQueryValueKey
0x18014d9f8
NtRaiseHardError
0x18014dda8
NtReadVirtualMemory
0x18014dca8
NtReplyPort
0x18014d990
NtRollbackTransaction
0x18014d9b8
NtSetEvent
0x18014ddb0
NtSetInformationThread
0x18014dc50
NtSetInformationToken
0x18014dc40
NtSetSecurityObject
0x18014d8c0
NtSetValueKey
0x18014d920
NtShutdownSystem
0x18014dd20
NtUnloadKey
0x18014df68
NtWaitForSingleObject
0x18014d8e0
NtWriteVirtualMemory
0x18014dcb0
RtlAbortRXact
0x18014db70
RtlAcquireResourceExclusive
0x18014dbb8
RtlAcquireResourceShared
0x18014df70
RtlAcquireSRWLockExclusive
0x18014dec0
RtlAcquireSRWLockShared
0x18014dce0
RtlAddAccessAllowedAce
0x18014de30
RtlAddAce
0x18014df80
RtlAddActionToRXact
0x18014db78
RtlAddMandatoryAce
0x18014d8b0
RtlAdjustPrivilege
0x18014dd28
RtlAllocateAndInitializeSid
0x18014ddd8
RtlAllocateHeap
0x18014d9a0
RtlAnsiStringToUnicodeString
0x18014df30
RtlAppendUnicodeStringToString
0x18014daa8
RtlAppendUnicodeToString
0x18014dcf8
RtlApplyRXact
0x18014db68
RtlAreAllAccessesGranted
0x18014db18
RtlAvlInsertNodeEx
0x18014dd18
RtlAvlRemoveNode
0x18014dd10
RtlCapabilityCheck
0x18014d868
RtlCheckTokenCapability
0x18014d860
RtlCheckTokenMembershipEx
0x18014de20
RtlCompareUnicodeString
0x18014dbf8
RtlConvertExclusiveToShared
0x18014de90
RtlConvertSharedToExclusive
0x18014de98
RtlConvertSidToUnicodeString
0x18014dbd8
RtlCopyLuid
0x18014dea0
RtlCopySid
0x18014de70
RtlCopyString
0x18014d980
RtlCopyUnicodeString
0x18014dbe8
RtlCreateAcl
0x18014de38
RtlCreateSecurityDescriptor
0x18014d8a8
RtlCreateServiceSid
0x18014df18
RtlCreateUnicodeString
0x18014df48
RtlCreateUnicodeStringFromAsciiz
0x18014dcd8
RtlDeleteAce
0x18014da80
RtlDeleteCriticalSection
0x18014dc00
RtlDeleteElementGenericTableAvl
0x18014db38
RtlDeleteResource
0x18014dec8
RtlDosPathNameToRelativeNtPathName_U
0x18014df50
RtlEnterCriticalSection
0x18014dc20
RtlEnumerateGenericTableAvl
0x18014db30
RtlEqualDomainName
0x18014da90
RtlEqualPrefixSid
0x18014de18
RtlEqualSid
0x18014dc10
RtlEqualString
0x18014d988
RtlEqualUnicodeString
0x18014dca0
RtlEthernetAddressToStringW
0x18014dd80
RtlFindAceByType
0x18014dd90
RtlFindCharInUnicodeString
0x18014df40
RtlFindMessage
0x18014dad0
RtlFreeAnsiString
0x18014df78
RtlFreeHeap
0x18014da48
RtlFreeSid
0x18014dd08
RtlFreeUnicodeString
0x18014dbd0
RtlGetAce
0x18014da70
RtlGetControlSecurityDescriptor
0x18014da58
RtlGetCurrentServiceSessionId
0x18014dc70
RtlGetDaclSecurityDescriptor
0x18014d9c0
RtlGetDeviceFamilyInfoEnum
0x18014d8c8
RtlGetLastNtStatus
0x18014dbf0
RtlGetLastWin32Error
0x18014de88
RtlGetNtProductType
0x18014deb0
RtlGetSaclSecurityDescriptor
0x18014dd88
RtlGetSuiteMask
0x18014d960
RtlGetThreadPreferredUILanguages
0x18014dad8
RtlGUIDFromString
0x18014dbb0
RtlIdentifierAuthoritySid
0x18014dde0
RtlImageNtHeader
0x18014dda0
RtlImpersonateSelf
0x18014d938
RtlImpersonateSelfEx
0x18014d858
RtlInitAnsiString
0x18014dbc0
RtlInitializeCriticalSection
0x18014dc38
RtlInitializeCriticalSectionAndSpinCount
0x18014dee0
RtlInitializeGenericTableAvl
0x18014db28
RtlInitializeResource
0x18014ded0
RtlInitializeRXact
0x18014daf0
RtlInitializeSid
0x18014de08
RtlInitializeSRWLock
0x18014da28
RtlInitString
0x18014def0
RtlInitUnicodeString
0x18014dc90
RtlInitUnicodeStringEx
0x18014dc30
RtlInsertElementGenericTableAvl
0x18014db48
RtlIntegerToChar
0x18014df38
RtlIntegerToUnicodeString
0x18014d9e0
RtlIpv4AddressToStringW
0x18014dd70
RtlIpv4StringToAddressExW
0x18014dba0
RtlIpv6AddressToStringW
0x18014dd78
RtlIpv6StringToAddressExW
0x18014dba8
RtlIsElevatedRid
0x18014d948
RtlIsMultiSessionSku
0x18014def8
RtlIsStateSeparationEnabled
0x18014ddd0
RtlLeaveCriticalSection
0x18014dc18
RtlLengthRequiredSid
0x18014de10
RtlLengthSecurityDescriptor
0x18014d9d0
RtlLengthSid
0x18014dc08
RtlLengthSidAsUnicodeString
0x18014dd30
RtlLookupElementGenericTableAvl
0x18014db40
RtlMakeSelfRelativeSD
0x18014d998
RtlMapGenericMask
0x18014da78
RtlNewSecurityObject
0x18014da40
RtlNtStatusToDosError
0x18014dbc8
RtlNumberGenericTableElementsAvl
0x18014db50
RtlNumberOfSetBitsUlongPtr
0x18014db58
RtlOwnerAcesPresent
0x18014d9d8
RtlpConvertAbsoluteToRelativeSecurityAttribute
0x18014d8e8
RtlpConvertRelativeToAbsoluteSecurityAttribute
0x18014d8f0
RtlpNtEnumerateSubKey
0x18014daa0
RtlpNtOpenKey
0x18014da98
RtlpNtQueryValueKey
0x18014db20
RtlPrefixUnicodeString
0x18014de68
RtlPublishWnfStateData
0x18014d970
RtlQueryInformationAcl
0x18014d958
RtlQueryTimeZoneInformation
0x18014dd98
RtlReleaseRelativeName
0x18014df60
RtlReleaseResource
0x18014df28
RtlReleaseSRWLockExclusive
0x18014de50
RtlReleaseSRWLockShared
0x18014dae0
RtlRunDecodeUnicodeString
0x18014dd00
RtlSetDaclSecurityDescriptor
0x18014d900
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
0x18014de80
RtlSetOwnerSecurityDescriptor
0x18014d908
RtlSetSaclSecurityDescriptor
0x18014d8b8
RtlSetSecurityObject
0x18014da60
RtlSetSystemBootStatus
0x18014ddc8
RtlSetThreadPreferredUILanguages
0x18014df10
RtlSidDominates
0x18014dc58
RtlSidHashInitialize
0x18014d898
RtlSidHashLookup
0x18014d8a0
RtlSizeHeap
0x18014db90
RtlStartRXact
0x18014deb8
RtlStringFromGUID
0x18014db80
RtlSubAuthorityCountSid
0x18014df00
RtlSubAuthoritySid
0x18014df08
RtlTestProtectedAccess
0x18014d880
RtlTimeFieldsToTime
0x18014de48
RtlTryEnterCriticalSection
0x18014d940
RtlUnicodeStringToAnsiString
0x18014df88
RtlUnicodeStringToInteger
0x18014db00
RtlUpcaseUnicodeStringToOemString
0x18014dc28
RtlValidRelativeSecurityDescriptor
0x18014da50
RtlValidSecurityDescriptor
0x18014d9c8
RtlValidSid
0x18014d888
RtlVerifyVersionInfo
0x18014d968
TpAllocTimer
0x18014ded8
TpIsTimerSet
0x18014de58
TpReleaseTimer
0x18014de28
TpSetTimer
0x18014de60
TpWaitForTimer
0x18014de40
wcsncmp
0x18014dd38
wcsstr
0x18014dd40
WinSqmIncrementDWORD
0x18014dce8
WinSqmSetString
0x18014db88
RPCRT4.dll
46
I_RpcBindingInqClientTokenAttributes
0x18014cbb8
I_RpcBindingInqLocalClientPID
0x18014cb58
I_RpcBindingInqTransportType
0x18014cc08
I_RpcBindingIsClientLocal
0x18014cc00
I_RpcMapWin32Status
0x18014cb10
I_RpcOpenClientProcess
0x18014cbd8
I_RpcOpenClientThread
0x18014cbd0
MesDecodeIncrementalHandleCreate
0x18014cba8
MesEncodeIncrementalHandleCreate
0x18014cb88
MesHandleFree
0x18014cc50
MesIncrementalHandleReset
0x18014cbc0
NdrClientCall3
0x18014cb28
NdrMesTypeAlignSize3
0x18014cbe0
NdrMesTypeDecode3
0x18014cbf0
NdrMesTypeEncode3
0x18014cbe8
NdrServerCall2
0x18014cb70
NdrServerCallAll
0x18014cb78
RpcBindingFree
0x18014cb40
RpcBindingFromStringBindingW
0x18014cb20
RpcBindingInqAuthClientW
0x18014cc28
RpcBindingInqMaxCalls
0x18014cb30
RpcBindingServerFromClient
0x18014cc48
RpcBindingSetAuthInfoW
0x18014cc38
RpcBindingToStringBindingW
0x18014cc30
RpcBindingVectorFree
0x18014cc60
RpcEpRegisterW
0x18014cc78
RpcExceptionFilter
0x18014cb48
RpcImpersonateClient
0x18014cb60
RpcMgmtEnableIdleCleanup
0x18014cc68
RpcRevertToSelf
0x18014cb50
RpcRevertToSelfEx
0x18014cbf8
RpcServerInqBindings
0x18014cc10
RpcServerInqCallAttributesW
0x18014cb68
RpcServerInqDefaultPrincNameW
0x18014cbb0
RpcServerRegisterAuthInfoW
0x18014cb98
RpcServerRegisterIf
0x18014cba0
RpcServerRegisterIf2
0x18014cb80
RpcServerRegisterIf3
0x18014cc70
RpcServerUseProtseqEpW
0x18014cb90
RpcSsGetContextBinding
0x18014cc40
RpcStringBindingComposeW
0x18014cb18
RpcStringBindingParseW
0x18014cc58
RpcStringFreeW
0x18014cb38
RpcUserFree
0x18014cc20
UuidEqual
0x18014cbc8
UuidFromStringW
0x18014cc18
SspiCli.dll
23
CredUnmarshalTargetInfo
0x18014cd38
LogonUserExExW
0x18014cce8
LsaCallAuthenticationPackage
0x18014ccd8
LsaConnectUntrusted
0x18014cd18
LsaDeregisterLogonProcess
0x18014cce0
LsaFreeReturnBuffer
0x18014cd28
LsaLogonUser
0x18014cd30
LsaLookupAuthenticationPackage
0x18014ccd0
LsaRegisterLogonProcess
0x18014ccc8
LsaRegisterPolicyChangeNotification
0x18014cc98
SecCacheSspiPackages
0x18014cc88
SeciAllocateAndSetCallFlags
0x18014cc90
SeciFreeCallContext
0x18014cca0
SspiCopyAuthIdentity
0x18014ccb0
SspiDecryptAuthIdentityEx
0x18014cd10
SspiEncodeStringsAsAuthIdentity
0x18014ccc0
SspiEncryptAuthIdentityEx
0x18014ccf8
SspiFreeAuthIdentity
0x18014ccb8
SspiLocalFree
0x18014cd00
SspiMarshalAuthIdentity
0x18014cd08
SspiUnmarshalAuthIdentity
0x18014cd20
SspiUnmarshalAuthIdentityInternal
0x18014ccf0
SspiValidateAuthIdentity
0x18014cca8
WLDAP32.dll
11
0x18014cd48
0x18014cd50
0x18014cd58
0x18014cd60
0x18014cd68
0x18014cd70
0x18014cd78
0x18014cd80
0x18014cd88
0x18014cd90
0x18014cd98
ntohl
0x18014cda8
No function matches your filter.