ManageCI.dll
Description: Code Integrity Management Interface
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5915
Architecture: 64-bit
Operating System: Windows NT
SHA256: f76699d0028220ca795429d971892dd8
File Size: 229.5 KB
Uploaded At: Dec. 1, 2025, 7:32 a.m.
Views: 8
Exported Functions
- BeginRemoveCIPolicy (Ordinal: 1, Address: 0x95c0)
- BeginRemoveSBCPToken (Ordinal: 2, Address: 0x8fd0)
- BeginSetSBCPToken (Ordinal: 3, Address: 0x9780)
- BeginTransaction (Ordinal: 4, Address: 0x8920)
- BeginUpsertCIPolicy (Ordinal: 5, Address: 0x9350)
- Commit (Ordinal: 6, Address: 0xa980)
- End (Ordinal: 7, Address: 0x4ba0)
- GetAllCIPolicies (Ordinal: 8, Address: 0x8f00)
- GetAllSBCPTokens (Ordinal: 9, Address: 0x8d90)
- GetCIPolicyByID (Ordinal: 10, Address: 0x8b70)
- GetPoliciesAuthorizedBySBCPToken (Ordinal: 11, Address: 0x8bf0)
- GetPolicyInformation (Ordinal: 12, Address: 0xa700)
- GetSBCPTokenByID (Ordinal: 13, Address: 0x8c10)
- GetSBCPTokensForPolicyID (Ordinal: 14, Address: 0x8ee0)
- GetSModeUnlockID (Ordinal: 15, Address: 0xa630)
- GetTenantID (Ordinal: 16, Address: 0x9c60)
- GetTokenInformation (Ordinal: 17, Address: 0xa780)
- IsInProgress (Ordinal: 18, Address: 0x8b40)
- ParsePolicy (Ordinal: 19, Address: 0xb1c0)
- Rollback (Ordinal: 20, Address: 0xace0)
- Start (Ordinal: 21, Address: 0x8780)
- ValidateState (Ordinal: 22, Address: 0x8b30)
- ManageCI (Ordinal: 23, Address: 0x5cc0)
- ManageCI_BeginRemoveCIPolicy (Ordinal: 24, Address: 0x59a0)
- ManageCI_BeginRemoveSBCPToken (Ordinal: 25, Address: 0x5950)
- ManageCI_BeginSetSBCPToken (Ordinal: 26, Address: 0x59c0)
- ManageCI_BeginTransaction (Ordinal: 27, Address: 0x5220)
- ManageCI_BeginUpsertCIPolicy (Ordinal: 28, Address: 0x5970)
- ManageCI_Commit (Ordinal: 29, Address: 0x5c80)
- ManageCI_End (Ordinal: 30, Address: 0x5240)
- ManageCI_GetAllCIPolicies (Ordinal: 31, Address: 0x5360)
- ManageCI_GetAllSBCPTokens (Ordinal: 32, Address: 0x5650)
- ManageCI_GetCIPolicyByID (Ordinal: 33, Address: 0x5290)
- ManageCI_GetPoliciesAuthorizedBySBCPToken (Ordinal: 34, Address: 0x5470)
- ManageCI_GetPolicyInformation (Ordinal: 35, Address: 0x5b10)
- ManageCI_GetSBCPTokenByID (Ordinal: 36, Address: 0x5580)
- ManageCI_GetSBCPTokensForPolicyID (Ordinal: 37, Address: 0x57d0)
- ManageCI_GetSModeUnlockID (Ordinal: 38, Address: 0x5a50)
- ManageCI_GetTenantID (Ordinal: 39, Address: 0x59f0)
- ManageCI_GetTokenInformation (Ordinal: 40, Address: 0x5c30)
- ManageCI_IsInProgress (Ordinal: 41, Address: 0x5280)
- ManageCI_ParsePolicy (Ordinal: 42, Address: 0x5170)
- ManageCI_Rollback (Ordinal: 43, Address: 0x5ca0)
- ManageCI_Start (Ordinal: 44, Address: 0x5200)
- ManageCI_ValidateState (Ordinal: 45, Address: 0x5260)
Imported DLLs & Functions
api-ms-win-core-com-l1-1-0.dll
- CoTaskMemAlloc (Address: 0x18002c9b0)
- CoTaskMemFree (Address: 0x18002c9b8)
- StringFromGUID2 (Address: 0x18002c9c0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x18002c9e0)
- IsDebuggerPresent (Address: 0x18002c9d0)
- OutputDebugStringW (Address: 0x18002c9d8)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x18002c9f0)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x18002ca00)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x18002ca28)
- SetLastError (Address: 0x18002ca20)
- SetUnhandledExceptionFilter (Address: 0x18002ca18)
- UnhandledExceptionFilter (Address: 0x18002ca10)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x18002ca38)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x18002ca48)
- HeapAlloc (Address: 0x18002ca58)
- HeapFree (Address: 0x18002ca50)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x18002ca68)
- LocalFree (Address: 0x18002ca70)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x18002ca80)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x18002cab0)
- GetModuleFileNameA (Address: 0x18002caa8)
- GetModuleHandleExW (Address: 0x18002ca98)
- GetModuleHandleW (Address: 0x18002caa0)
- GetProcAddress (Address: 0x18002ca90)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x18002cac0)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x18002cae0)
- GetCurrentProcessId (Address: 0x18002cad0)
- GetCurrentThreadId (Address: 0x18002cae8)
- TerminateProcess (Address: 0x18002cad8)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x18002caf8)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x18002cb08)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x18002cb30)
- RegCreateKeyExW (Address: 0x18002cb28)
- RegDeleteTreeW (Address: 0x18002cb50)
- RegEnumKeyExW (Address: 0x18002cb38)
- RegGetValueW (Address: 0x18002cb18)
- RegOpenKeyExW (Address: 0x18002cb48)
- RegQueryInfoKeyW (Address: 0x18002cb40)
- RegQueryValueExW (Address: 0x18002cb58)
- RegSetValueExW (Address: 0x18002cb20)
api-ms-win-core-registry-l2-1-0.dll
- RegCreateKeyW (Address: 0x18002cb68)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x18002cb78)
- RtlLookupFunctionEntry (Address: 0x18002cb80)
- RtlVirtualUnwind (Address: 0x18002cb88)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x18002cbe0)
- AcquireSRWLockShared (Address: 0x18002cbf8)
- CreateEventW (Address: 0x18002cc20)
- CreateMutexExW (Address: 0x18002cba0)
- CreateSemaphoreExW (Address: 0x18002cc00)
- DeleteCriticalSection (Address: 0x18002cc28)
- EnterCriticalSection (Address: 0x18002cba8)
- InitializeCriticalSectionAndSpinCount (Address: 0x18002cbd8)
- InitializeCriticalSectionEx (Address: 0x18002cbc0)
- LeaveCriticalSection (Address: 0x18002cbb0)
- OpenSemaphoreW (Address: 0x18002cb98)
- ReleaseMutex (Address: 0x18002cbb8)
- ReleaseSemaphore (Address: 0x18002cbe8)
- ReleaseSRWLockExclusive (Address: 0x18002cbc8)
- ReleaseSRWLockShared (Address: 0x18002cbf0)
- ResetEvent (Address: 0x18002cc18)
- SetEvent (Address: 0x18002cc10)
- WaitForSingleObject (Address: 0x18002cbd0)
- WaitForSingleObjectEx (Address: 0x18002cc08)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x18002cc40)
- InitOnceComplete (Address: 0x18002cc38)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x18002cc50)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x18002cc60)
- CreateThreadpoolTimer (Address: 0x18002cc68)
- SetThreadpoolTimer (Address: 0x18002cc78)
- WaitForThreadpoolTimerCallbacks (Address: 0x18002cc70)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x18002cd30)
- __CxxFrameHandler3 (Address: 0x18002cd28)
- __CxxFrameHandler4 (Address: 0x18002cd70)
- __std_terminate (Address: 0x18002cd68)
- _CxxThrowException (Address: 0x18002cd38)
- _o___std_exception_copy (Address: 0x18002cd58)
- _o___std_exception_destroy (Address: 0x18002cd50)
- _o___std_type_info_destroy_list (Address: 0x18002cd48)
- _o___stdio_common_vsnprintf_s (Address: 0x18002cd78)
- _o___stdio_common_vswprintf (Address: 0x18002cd40)
- _o__callnewh (Address: 0x18002cc88)
- _o__cexit (Address: 0x18002cc90)
- _o__configure_narrow_argv (Address: 0x18002cc98)
- _o__crt_atexit (Address: 0x18002cca0)
- _o__errno (Address: 0x18002cca8)
- _o__execute_onexit_table (Address: 0x18002ccb0)
- _o__initialize_narrow_environment (Address: 0x18002ccb8)
- _o__initialize_onexit_table (Address: 0x18002ccc0)
- _o__invalid_parameter_noinfo (Address: 0x18002ccc8)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x18002ccd0)
- _o__purecall (Address: 0x18002ccd8)
- _o__register_onexit_function (Address: 0x18002cce0)
- _o__seh_filter_dll (Address: 0x18002cce8)
- _o__wcsicmp (Address: 0x18002ccf8)
- _o__wcsnicmp (Address: 0x18002cd00)
- _o_bsearch (Address: 0x18002cd08)
- _o_free (Address: 0x18002cd10)
- _o_malloc (Address: 0x18002cd18)
- _o_realloc (Address: 0x18002cd20)
- memcmp (Address: 0x18002cd88)
- memcpy (Address: 0x18002cd90)
- memmove (Address: 0x18002ccf0)
- strchr (Address: 0x18002cd60)
- wcschr (Address: 0x18002cd80)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x18002cda8)
- _initterm_e (Address: 0x18002cda0)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x18002cdb8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x18002cdd0)
- EventSetInformation (Address: 0x18002cdc8)
- EventUnregister (Address: 0x18002cde0)
- EventWriteTransfer (Address: 0x18002cdd8)
CRYPT32.dll
- CertCloseStore (Address: 0x18002c918)
- CertFreeCertificateChain (Address: 0x18002c938)
- CertFreeCertificateContext (Address: 0x18002c908)
- CertGetCertificateChain (Address: 0x18002c900)
- CertGetCertificateContextProperty (Address: 0x18002c958)
- CertGetEnhancedKeyUsage (Address: 0x18002c930)
- CertGetNameStringW (Address: 0x18002c940)
- CertOpenStore (Address: 0x18002c950)
- CryptEncodeObjectEx (Address: 0x18002c928)
- CryptMsgClose (Address: 0x18002c8f8)
- CryptMsgGetParam (Address: 0x18002c920)
- CryptMsgOpenToDecode (Address: 0x18002c910)
- CryptMsgUpdate (Address: 0x18002c8f0)
- CryptVerifyMessageSignature (Address: 0x18002c948)
msvcp_win.dll
- _Wcscoll (Address: 0x18002cee8)
- _Wcsxfrm (Address: 0x18002cea8)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18002ce18)
- ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18002ce48)
- ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x18002cdf8)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18002ced0)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18002ce10)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18002cec8)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x18002cf40)
- ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x18002ce88)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x18002ce78)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x18002cf30)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x18002cec0)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18002cf38)
- ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x18002cf58)
- ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x18002ce58)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x18002ced8)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x18002ce50)
- ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x18002ce80)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x18002ce00)
- ??0facet@locale@std@@IEAA@_K@Z (Address: 0x18002ce20)
- ??1_Locinfo@std@@QEAA@XZ (Address: 0x18002cdf0)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x18002cee0)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18002ce98)
- ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18002cef0)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18002cf50)
- ??1facet@locale@std@@MEAA@XZ (Address: 0x18002ce28)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x18002ce08)
- ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x18002ce90)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x18002ce70)
- ?id@?$collate@G@std@@2V0locale@2@A (Address: 0x18002ceb8)
- ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x18002ceb0)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18002cef8)
- ?is@?$ctype@G@std@@QEBA_NFG@Z (Address: 0x18002ce30)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x18002cf08)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x18002cea0)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x18002cf28)
- ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x18002cf48)
- ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x18002ce60)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x18002cf00)
- ?tolower@?$ctype@G@std@@QEBAGG@Z (Address: 0x18002ce38)
- ?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z (Address: 0x18002ce40)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x18002cf20)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x18002ce68)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x18002cf18)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x18002cf10)
NETAPI32.dll
- NetFreeAadJoinInformation (Address: 0x18002c968)
- NetGetAadJoinInformation (Address: 0x18002c970)
ntdll.dll
- NtDeleteFile (Address: 0x18002cfa8)
- NtQuerySystemInformation (Address: 0x18002cff8)
- NtSetSystemInformation (Address: 0x18002d000)
- RtlAppendUnicodeStringToString (Address: 0x18002cfe8)
- RtlCompareUnicodeString (Address: 0x18002cf78)
- RtlCreateUnicodeString (Address: 0x18002cfd0)
- RtlEqualUnicodeString (Address: 0x18002cfe0)
- RtlFreeUnicodeString (Address: 0x18002cfd8)
- RtlGetPersistedStateLocation (Address: 0x18002cff0)
- RtlGUIDFromString (Address: 0x18002cf70)
- RtlInitUnicodeString (Address: 0x18002d008)
- RtlIsStateSeparationEnabled (Address: 0x18002cfb0)
- RtlStringFromGUID (Address: 0x18002cf68)
- ZwClose (Address: 0x18002cf80)
- ZwCreateFile (Address: 0x18002cfb8)
- ZwOpenFile (Address: 0x18002cf90)
- ZwQueryDirectoryFile (Address: 0x18002cf98)
- ZwQueryInformationFile (Address: 0x18002cf88)
- ZwQuerySystemInformation (Address: 0x18002cfc8)
- ZwReadFile (Address: 0x18002cfc0)
- ZwWriteFile (Address: 0x18002cfa0)
OLEAUT32.dll
- SysAllocString (Address: 0x18002c988)
- SysFreeString (Address: 0x18002c980)
RPCRT4.dll
- UuidFromStringW (Address: 0x18002c998)
- UuidToStringW (Address: 0x18002c9a0)