MPSSVC.dll
Description: Microsoft Protection Service
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6328
Architecture: 64-bit
Operating System: Windows NT
SHA256: cfd6b5a1994725eb65a6a0ec98a2ef42
File Size: 1.1 MB
Uploaded At: Dec. 1, 2025, 7:33 a.m.
Views: 8
Exported Functions
- ServiceMain (Ordinal: 1, Address: 0x2cd40)
- SvchostPushServiceGlobals (Ordinal: 2, Address: 0x371f0)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1800c9260)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1800c9278)
- IsDebuggerPresent (Address: 0x1800c9280)
- OutputDebugStringW (Address: 0x1800c9270)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1800c9290)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1800c92a0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800c92c0)
- SetLastError (Address: 0x1800c92b0)
- SetUnhandledExceptionFilter (Address: 0x1800c92c8)
- UnhandledExceptionFilter (Address: 0x1800c92b8)
api-ms-win-core-file-l1-1-0.dll
- CreateFileW (Address: 0x1800c9318)
- FileTimeToLocalFileTime (Address: 0x1800c92e0)
- FindClose (Address: 0x1800c92e8)
- FindFirstFileW (Address: 0x1800c92f0)
- FindNextFileW (Address: 0x1800c92f8)
- GetFileAttributesW (Address: 0x1800c9310)
- GetFileSize (Address: 0x1800c92d8)
- GetFileType (Address: 0x1800c9328)
- GetLogicalDriveStringsW (Address: 0x1800c9300)
- QueryDosDeviceW (Address: 0x1800c9308)
- SetEndOfFile (Address: 0x1800c9320)
- SetFilePointerEx (Address: 0x1800c9338)
- WriteFile (Address: 0x1800c9330)
api-ms-win-core-file-l2-1-0.dll
- CopyFileExW (Address: 0x1800c9348)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1800c9360)
- DuplicateHandle (Address: 0x1800c9358)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800c9370)
- HeapAlloc (Address: 0x1800c9380)
- HeapFree (Address: 0x1800c9378)
- HeapReAlloc (Address: 0x1800c9388)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x1800c9398)
- LocalFree (Address: 0x1800c93a0)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x1800c93b0)
api-ms-win-core-io-l1-1-1.dll
- CancelIo (Address: 0x1800c93c0)
api-ms-win-core-libraryloader-l1-2-0.dll
- FreeLibrary (Address: 0x1800c93d8)
- GetModuleFileNameA (Address: 0x1800c93d0)
- GetModuleHandleExW (Address: 0x1800c93e8)
- GetModuleHandleW (Address: 0x1800c9400)
- GetProcAddress (Address: 0x1800c93e0)
- LoadLibraryExW (Address: 0x1800c93f8)
- LoadStringW (Address: 0x1800c93f0)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1800c9410)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x1800c9420)
- MapViewOfFile (Address: 0x1800c9428)
- UnmapViewOfFile (Address: 0x1800c9430)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1800c9440)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessAsUserW (Address: 0x1800c9460)
- CreateThread (Address: 0x1800c9498)
- GetCurrentProcess (Address: 0x1800c9468)
- GetCurrentProcessId (Address: 0x1800c9490)
- GetCurrentThread (Address: 0x1800c9488)
- GetCurrentThreadId (Address: 0x1800c94a0)
- OpenProcessToken (Address: 0x1800c9470)
- OpenThreadToken (Address: 0x1800c9458)
- QueueUserAPC (Address: 0x1800c9480)
- ResumeThread (Address: 0x1800c9450)
- TerminateProcess (Address: 0x1800c94a8)
- TerminateThread (Address: 0x1800c9478)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800c94b8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1800c94c8)
- RegEnumKeyExW (Address: 0x1800c94e0)
- RegGetValueW (Address: 0x1800c94d0)
- RegNotifyChangeKeyValue (Address: 0x1800c94d8)
- RegOpenCurrentUser (Address: 0x1800c94f8)
- RegOpenKeyExW (Address: 0x1800c94e8)
- RegQueryValueExW (Address: 0x1800c94f0)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1800c9510)
- RtlCompareMemory (Address: 0x1800c9508)
- RtlLookupFunctionEntry (Address: 0x1800c9520)
- RtlVirtualUnwind (Address: 0x1800c9518)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathFileExistsW (Address: 0x1800c9538)
- PathFindFileNameW (Address: 0x1800c9548)
- PathIsRelativeW (Address: 0x1800c9530)
- PathRemoveFileSpecW (Address: 0x1800c9540)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x1800c9558)
- CompareStringW (Address: 0x1800c9560)
- MultiByteToWideChar (Address: 0x1800c9568)
- WideCharToMultiByte (Address: 0x1800c9570)
api-ms-win-core-string-l2-1-0.dll
- CharLowerBuffW (Address: 0x1800c9580)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiA (Address: 0x1800c9590)
- lstrcmpiW (Address: 0x1800c9598)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1800c9660)
- AcquireSRWLockShared (Address: 0x1800c95c8)
- CreateEventA (Address: 0x1800c9630)
- CreateEventW (Address: 0x1800c95a8)
- CreateMutexExW (Address: 0x1800c95d8)
- CreateMutexW (Address: 0x1800c95d0)
- CreateSemaphoreExW (Address: 0x1800c95f8)
- CreateWaitableTimerExW (Address: 0x1800c9678)
- DeleteCriticalSection (Address: 0x1800c95c0)
- EnterCriticalSection (Address: 0x1800c9610)
- InitializeCriticalSection (Address: 0x1800c9668)
- InitializeCriticalSectionAndSpinCount (Address: 0x1800c95b0)
- InitializeCriticalSectionEx (Address: 0x1800c9648)
- InitializeSRWLock (Address: 0x1800c9650)
- LeaveCriticalSection (Address: 0x1800c9640)
- OpenSemaphoreW (Address: 0x1800c9638)
- ReleaseMutex (Address: 0x1800c9628)
- ReleaseSemaphore (Address: 0x1800c9618)
- ReleaseSRWLockExclusive (Address: 0x1800c9670)
- ReleaseSRWLockShared (Address: 0x1800c9620)
- ResetEvent (Address: 0x1800c9600)
- SetEvent (Address: 0x1800c95e8)
- SetWaitableTimer (Address: 0x1800c95b8)
- TryAcquireSRWLockExclusive (Address: 0x1800c95e0)
- WaitForMultipleObjectsEx (Address: 0x1800c95f0)
- WaitForSingleObject (Address: 0x1800c9608)
- WaitForSingleObjectEx (Address: 0x1800c9658)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x1800c9698)
- InitOnceComplete (Address: 0x1800c9690)
- Sleep (Address: 0x1800c9688)
- SleepConditionVariableSRW (Address: 0x1800c96a0)
- WakeAllConditionVariable (Address: 0x1800c96a8)
api-ms-win-core-synch-l1-2-1.dll
- WaitForMultipleObjects (Address: 0x1800c96b8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetLocalTime (Address: 0x1800c96e0)
- GetSystemTimeAsFileTime (Address: 0x1800c96d0)
- GetTickCount (Address: 0x1800c96c8)
- GetTickCount64 (Address: 0x1800c96e8)
- GetVersionExW (Address: 0x1800c96d8)
api-ms-win-core-threadpool-l1-2-0.dll
- CancelThreadpoolIo (Address: 0x1800c9738)
- CloseThreadpoolIo (Address: 0x1800c9710)
- CloseThreadpoolTimer (Address: 0x1800c9728)
- CloseThreadpoolWork (Address: 0x1800c9720)
- CreateThreadpoolIo (Address: 0x1800c9740)
- CreateThreadpoolTimer (Address: 0x1800c9758)
- CreateThreadpoolWork (Address: 0x1800c9700)
- SetThreadpoolTimer (Address: 0x1800c96f8)
- StartThreadpoolIo (Address: 0x1800c9718)
- SubmitThreadpoolWork (Address: 0x1800c9730)
- WaitForThreadpoolIoCallbacks (Address: 0x1800c9748)
- WaitForThreadpoolTimerCallbacks (Address: 0x1800c9750)
- WaitForThreadpoolWorkCallbacks (Address: 0x1800c9708)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- CreateTimerQueue (Address: 0x1800c9770)
- CreateTimerQueueTimer (Address: 0x1800c9780)
- DeleteTimerQueueEx (Address: 0x1800c9768)
- DeleteTimerQueueTimer (Address: 0x1800c9778)
- UnregisterWaitEx (Address: 0x1800c9788)
api-ms-win-core-threadpool-private-l1-1-0.dll
- RegisterWaitForSingleObjectEx (Address: 0x1800c9798)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x1800c97a8)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x1800c97b8)
- EncodePointer (Address: 0x1800c97c0)
api-ms-win-devices-config-l1-1-1.dll
- CM_Open_Class_KeyW (Address: 0x1800c97d0)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- TraceMessage (Address: 0x1800c97e0)
api-ms-win-eventing-consumer-l1-1-0.dll
- CloseTrace (Address: 0x1800c97f8)
- OpenTraceW (Address: 0x1800c9800)
- ProcessTrace (Address: 0x1800c97f0)
api-ms-win-eventing-controller-l1-1-0.dll
- ControlTraceW (Address: 0x1800c9818)
- EnableTraceEx2 (Address: 0x1800c9820)
- StartTraceW (Address: 0x1800c9810)
api-ms-win-eventing-obsolete-l1-1-0.dll
- RemoveTraceCallback (Address: 0x1800c9830)
api-ms-win-eventing-provider-l1-1-0.dll
- EventProviderEnabled (Address: 0x1800c9848)
- EventRegister (Address: 0x1800c9858)
- EventSetInformation (Address: 0x1800c9850)
- EventUnregister (Address: 0x1800c9840)
- EventWriteTransfer (Address: 0x1800c9860)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x1800c9888)
- AddAccessAllowedAce (Address: 0x1800c9908)
- AdjustTokenPrivileges (Address: 0x1800c9890)
- AllocateAndInitializeSid (Address: 0x1800c98f8)
- CheckTokenMembership (Address: 0x1800c9898)
- CreateWellKnownSid (Address: 0x1800c9900)
- DuplicateTokenEx (Address: 0x1800c98f0)
- EqualSid (Address: 0x1800c98e8)
- FreeSid (Address: 0x1800c98c8)
- GetLengthSid (Address: 0x1800c9870)
- GetSecurityDescriptorControl (Address: 0x1800c98d0)
- GetSecurityDescriptorLength (Address: 0x1800c98a0)
- InitializeAcl (Address: 0x1800c98a8)
- InitializeSecurityDescriptor (Address: 0x1800c98c0)
- IsValidSecurityDescriptor (Address: 0x1800c98b8)
- IsValidSid (Address: 0x1800c9878)
- MakeSelfRelativeSD (Address: 0x1800c98d8)
- SetFileSecurityW (Address: 0x1800c98e0)
- SetSecurityDescriptorDacl (Address: 0x1800c9880)
- SetSecurityDescriptorGroup (Address: 0x1800c98b0)
- SetSecurityDescriptorOwner (Address: 0x1800c9910)
api-ms-win-security-base-l1-2-0.dll
- CheckTokenCapability (Address: 0x1800c9920)
api-ms-win-security-grouppolicy-l1-1-0.dll
- RegisterGPNotificationInternal (Address: 0x1800c9938)
- UnregisterGPNotificationInternal (Address: 0x1800c9930)
DNSAPI.dll
- DnsFreeNrptRuleNamesList (Address: 0x1800c9168)
- DnsFreeProxyName (Address: 0x1800c9178)
- DnsGetNrptRuleNamesList (Address: 0x1800c9158)
- DnsGetProxyInformation (Address: 0x1800c9170)
- DnsRemoveNrptRule (Address: 0x1800c9160)
- DnsSetNrptRules (Address: 0x1800c9150)
fwpuclnt.dll
- FwpiExpandCriteria0 (Address: 0x1800c99f0)
- FwpiFreeCriteria0 (Address: 0x1800c9aa8)
- FwpmBitmapIndexFree0 (Address: 0x1800c9988)
- FwpmBitmapIndexGet0 (Address: 0x1800c99d0)
- FwpmCalloutAdd0 (Address: 0x1800c9990)
- FwpmEngineClose0 (Address: 0x1800c9a90)
- FwpmEngineOpen0 (Address: 0x1800c9aa0)
- FwpmEngineSetOption0 (Address: 0x1800c9a98)
- FwpmEventProviderCreate0 (Address: 0x1800c9a70)
- FwpmEventProviderDestroy0 (Address: 0x1800c9a50)
- FwpmEventProviderFireNetEvent0 (Address: 0x1800c9a78)
- FwpmEventProviderIsNetEventTypeEnabled0 (Address: 0x1800c9a60)
- FwpmFilterAdd0 (Address: 0x1800c9980)
- FwpmFilterCreateEnumHandle0 (Address: 0x1800c99e8)
- FwpmFilterDeleteById0 (Address: 0x1800c99a0)
- FwpmFilterDeleteByKey0 (Address: 0x1800c99a8)
- FwpmFilterDestroyEnumHandle0 (Address: 0x1800c99d8)
- FwpmFilterEnum0 (Address: 0x1800c99e0)
- FwpmFilterSubscribeChanges0 (Address: 0x1800c9a88)
- FwpmFilterUnsubscribeChanges0 (Address: 0x1800c9a80)
- FwpmFreeMemory0 (Address: 0x1800c9a20)
- FwpmIPsecTunnelAdd2 (Address: 0x1800c9ab0)
- FwpmIPsecTunnelAddConditions0 (Address: 0x1800c9950)
- FwpmIPsecTunnelDeleteByKey0 (Address: 0x1800c9948)
- FwpmNetEventCreateEnumHandle0 (Address: 0x1800c9a00)
- FwpmNetEventDestroyEnumHandle0 (Address: 0x1800c9ab8)
- FwpmNetEventEnum5 (Address: 0x1800c99f8)
- FwpmNetEventSubscribe4 (Address: 0x1800c9a68)
- FwpmNetEventUnsubscribe0 (Address: 0x1800c9a58)
- FwpmProviderAdd0 (Address: 0x1800c9970)
- FwpmProviderContextAdd0 (Address: 0x1800c99b8)
- FwpmProviderContextAdd3 (Address: 0x1800c9978)
- FwpmProviderContextDeleteById0 (Address: 0x1800c99c8)
- FwpmProviderContextDeleteByKey0 (Address: 0x1800c9960)
- FwpmSubLayerAdd0 (Address: 0x1800c9958)
- FwpmTransactionAbort0 (Address: 0x1800c9998)
- FwpmTransactionBegin0 (Address: 0x1800c99b0)
- FwpmTransactionCommit0 (Address: 0x1800c99c0)
- FwppGetMD5HashBytes (Address: 0x1800c9968)
- IkeextSaCreateEnumHandle0 (Address: 0x1800c9a10)
- IkeextSaDeleteById0 (Address: 0x1800c9a40)
- IkeextSaDestroyEnumHandle0 (Address: 0x1800c9a08)
- IkeextSaEnum2 (Address: 0x1800c9a28)
- IPsecSaContextCreateEnumHandle0 (Address: 0x1800c9a48)
- IPsecSaContextDeleteById0 (Address: 0x1800c9a38)
- IPsecSaContextDestroyEnumHandle0 (Address: 0x1800c9a18)
- IPsecSaContextEnum0 (Address: 0x1800c9a30)
msvcrt.dll
- ___lc_codepage_func (Address: 0x1800c9b90)
- ___lc_handle_func (Address: 0x1800c9b98)
- ___mb_cur_max_func (Address: 0x1800c9b80)
- __C_specific_handler (Address: 0x1800c9ca8)
- __crtLCMapStringA (Address: 0x1800c9b70)
- __CxxFrameHandler3 (Address: 0x1800c9bd0)
- __dllonexit (Address: 0x1800c9b00)
- __pctype_func (Address: 0x1800c9ba8)
- __uncaught_exception (Address: 0x1800c9bb0)
- _amsg_exit (Address: 0x1800c9b20)
- _callnewh (Address: 0x1800c9d00)
- _CxxThrowException (Address: 0x1800c9b30)
- _initterm (Address: 0x1800c9b18)
- _ismbblead (Address: 0x1800c9b28)
- _lock (Address: 0x1800c9bf8)
- _onexit (Address: 0x1800c9af8)
- _purecall (Address: 0x1800c9cd8)
- _ultow_s (Address: 0x1800c9ae8)
- _unlock (Address: 0x1800c9bf0)
- _vsnprintf (Address: 0x1800c9ca0)
- _vsnprintf_s (Address: 0x1800c9cc0)
- _vsnwprintf (Address: 0x1800c9b60)
- _wcsdup (Address: 0x1800c9af0)
- _wcsicmp (Address: 0x1800c9c30)
- _wcslwr_s (Address: 0x1800c9c48)
- _wcsnicmp (Address: 0x1800c9bc8)
- _wsetlocale (Address: 0x1800c9b68)
- _XcptFilter (Address: 0x1800c9b38)
- ??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800c9c80)
- ??0bad_cast@@QEAA@PEBD@Z (Address: 0x1800c9c18)
- ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800c9cd0)
- ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800c9ce8)
- ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800c9b78)
- ??0exception@@QEAA@XZ (Address: 0x1800c9ce0)
- ??1bad_cast@@UEAA@XZ (Address: 0x1800c9bd8)
- ??1exception@@UEAA@XZ (Address: 0x1800c9b58)
- ??1type_info@@UEAA@XZ (Address: 0x1800c9b10)
- ?terminate@@YAXXZ (Address: 0x1800c9b08)
- ?what@exception@@UEBAPEBDXZ (Address: 0x1800c9b50)
- abort (Address: 0x1800c9ad0)
- bsearch (Address: 0x1800c9b40)
- calloc (Address: 0x1800c9b88)
- free (Address: 0x1800c9cf8)
- islower (Address: 0x1800c9ac8)
- isupper (Address: 0x1800c9ba0)
- iswdigit (Address: 0x1800c9c70)
- iswspace (Address: 0x1800c9c58)
- localeconv (Address: 0x1800c9cc8)
- malloc (Address: 0x1800c9cf0)
- memcmp (Address: 0x1800c9b48)
- memcpy (Address: 0x1800c9be0)
- memcpy_s (Address: 0x1800c9c90)
- memmove (Address: 0x1800c9bb8)
- memmove_s (Address: 0x1800c9cb8)
- memset (Address: 0x1800c9ae0)
- qsort (Address: 0x1800c9c88)
- setlocale (Address: 0x1800c9be8)
- sprintf_s (Address: 0x1800c9cb0)
- strcspn (Address: 0x1800c9c98)
- toupper (Address: 0x1800c9c00)
- towlower (Address: 0x1800c9c60)
- towupper (Address: 0x1800c9c10)
- wcscat_s (Address: 0x1800c9bc0)
- wcschr (Address: 0x1800c9c08)
- wcscmp (Address: 0x1800c9c78)
- wcscpy_s (Address: 0x1800c9ad8)
- wcsncmp (Address: 0x1800c9c50)
- wcsnlen (Address: 0x1800c9c68)
- wcspbrk (Address: 0x1800c9c38)
- wcsstr (Address: 0x1800c9c40)
- wcstok (Address: 0x1800c9c20)
- wcstok_s (Address: 0x1800c9c28)
ntdll.dll
- DbgPrint (Address: 0x1800c9db8)
- EtwEventEnabled (Address: 0x1800c9d68)
- EtwEventRegister (Address: 0x1800c9e08)
- EtwEventUnregister (Address: 0x1800c9e10)
- EtwEventWrite (Address: 0x1800c9df8)
- EtwGetTraceEnableFlags (Address: 0x1800c9e20)
- EtwGetTraceEnableLevel (Address: 0x1800c9e30)
- EtwGetTraceLoggerHandle (Address: 0x1800c9e28)
- EtwRegisterTraceGuidsW (Address: 0x1800c9e38)
- EtwTraceMessage (Address: 0x1800c9e00)
- EtwUnregisterTraceGuids (Address: 0x1800c9e18)
- NtQueryInformationProcess (Address: 0x1800c9df0)
- NtQuerySecurityAttributesToken (Address: 0x1800c9d40)
- RtlAllocateHeap (Address: 0x1800c9d28)
- RtlCompareUnicodeString (Address: 0x1800c9d20)
- RtlCopySid (Address: 0x1800c9d80)
- RtlCreateServiceSid (Address: 0x1800c9d18)
- RtlEqualSid (Address: 0x1800c9da8)
- RtlFreeHeap (Address: 0x1800c9d38)
- RtlGetActiveConsoleId (Address: 0x1800c9de8)
- RtlGetAppContainerSidType (Address: 0x1800c9db0)
- RtlInitUnicodeString (Address: 0x1800c9d30)
- RtlIpv4AddressToStringA (Address: 0x1800c9dc0)
- RtlIpv4AddressToStringW (Address: 0x1800c9d50)
- RtlIpv6AddressToStringA (Address: 0x1800c9da0)
- RtlIpv6AddressToStringW (Address: 0x1800c9d60)
- RtlIsCapabilitySid (Address: 0x1800c9d90)
- RtlIsPackageSid (Address: 0x1800c9d48)
- RtlIsParentOfChildAppContainer (Address: 0x1800c9e40)
- RtlIsStateSeparationEnabled (Address: 0x1800c9d58)
- RtlLengthSid (Address: 0x1800c9d88)
- RtlNtStatusToDosError (Address: 0x1800c9d78)
- RtlNtStatusToDosErrorNoTeb (Address: 0x1800c9d10)
- RtlPublishWnfStateData (Address: 0x1800c9dd0)
- RtlQueryPackageIdentity (Address: 0x1800c9d70)
- RtlSubscribeWnfStateChangeNotification (Address: 0x1800c9dd8)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800c9dc8)
- RtlValidSid (Address: 0x1800c9d98)
- WinSqmAddToStream (Address: 0x1800c9de0)
RPCRT4.dll
- I_RpcBindingIsClientLocal (Address: 0x1800c91c8)
- Ndr64AsyncServerCallAll (Address: 0x1800c9208)
- NdrAsyncServerCall (Address: 0x1800c91f8)
- NdrServerCall2 (Address: 0x1800c91e0)
- NdrServerCallAll (Address: 0x1800c9200)
- RpcAsyncAbortCall (Address: 0x1800c91f0)
- RpcAsyncCompleteCall (Address: 0x1800c91e8)
- RpcBindingInqAuthClientW (Address: 0x1800c91a0)
- RpcBindingToStringBindingW (Address: 0x1800c9238)
- RpcBindingVectorFree (Address: 0x1800c9190)
- RpcEpRegisterW (Address: 0x1800c91d0)
- RpcEpUnregister (Address: 0x1800c9188)
- RpcImpersonateClient (Address: 0x1800c91d8)
- RpcRevertToSelf (Address: 0x1800c91b0)
- RpcServerInqBindings (Address: 0x1800c9198)
- RpcServerInqDefaultPrincNameW (Address: 0x1800c9210)
- RpcServerRegisterAuthInfoW (Address: 0x1800c9218)
- RpcServerRegisterIf3 (Address: 0x1800c9230)
- RpcServerUnregisterIfEx (Address: 0x1800c91b8)
- RpcServerUseProtseqW (Address: 0x1800c9228)
- RpcStringBindingParseW (Address: 0x1800c91a8)
- RpcStringFreeW (Address: 0x1800c9220)
- UuidCreate (Address: 0x1800c91c0)
SspiCli.dll
- LsaRegisterPolicyChangeNotification (Address: 0x1800c9248)
- LsaUnregisterPolicyChangeNotification (Address: 0x1800c9250)