netlogon.dll

Description: Net Logon Services DLL

Version: 10.0.19041.6328

Architecture: 64-bit

Operating System: Windows NT

SHA256: ab5cca023d56e1ed7435124db971a826

File Size: 899.0 KB

Uploaded At: Dec. 1, 2025, 7:35 a.m.

Views: 5

Exported Functions

DsrGetDcNameEx2 (Ordinal: 1, Address: 0x15690)
I_NetLogonAddressToSiteName (Ordinal: 2, Address: 0x5e520)
I_NetLogonAppendChangeLog (Ordinal: 3, Address: 0x4cc20)
I_NetLogonCloseChangeLog (Ordinal: 4, Address: 0x4cc60)
I_NetLogonFree (Ordinal: 5, Address: 0x29b40)
I_NetLogonGetAuthDataEx (Ordinal: 6, Address: 0x536d0)
I_NetLogonGetSerialNumber (Ordinal: 7, Address: 0x2b5e0)
I_NetLogonLdapLookupEx (Ordinal: 8, Address: 0x1e030)
I_NetLogonMixedDomain (Ordinal: 9, Address: 0x6a120)
I_NetLogonNewChangeLog (Ordinal: 10, Address: 0x4ccb0)
I_NetLogonReadChangeLog (Ordinal: 11, Address: 0x4cd00)
I_NetLogonSendToSamOnDc (Ordinal: 12, Address: 0x53ab0)
I_NetLogonSetServiceBits (Ordinal: 13, Address: 0x7b60)
I_NetNotifyDelta (Ordinal: 14, Address: 0x4c3a0)
I_NetNotifyDsChange (Ordinal: 15, Address: 0x4c3c0)
I_NetNotifyMachineAccount (Ordinal: 16, Address: 0x9890)
I_NetNotifyNetlogonDllHandle (Ordinal: 17, Address: 0x4c4f0)
I_NetNotifyNtdsDsaDeletion (Ordinal: 18, Address: 0x4c560)
I_NetNotifyRole (Ordinal: 19, Address: 0x2b3e0)
I_NetNotifyTrustedDomain (Ordinal: 20, Address: 0x4c610)
InitSecurityInterfaceW (Ordinal: 21, Address: 0x2bbd0)
NetIGetEncTypes (Ordinal: 22, Address: 0x29c20)
NetILogonSamLogon (Ordinal: 23, Address: 0x15080)
NlNetlogonMain (Ordinal: 24, Address: 0x27dd0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180082368)

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x180082378)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180082388)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180082398)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800823b8)
SetLastError (Address: 0x1800823c0)
SetUnhandledExceptionFilter (Address: 0x1800823a8)
UnhandledExceptionFilter (Address: 0x1800823b0)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x1800823d0)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x1800823f0)
CreateFileW (Address: 0x180082400)
DeleteFileW (Address: 0x180082408)
GetFileAttributesW (Address: 0x1800823e8)
GetFileSize (Address: 0x1800823e0)
ReadFile (Address: 0x1800823f8)
SetFilePointer (Address: 0x180082418)
WriteFile (Address: 0x180082410)

api-ms-win-core-file-l2-1-0.dll

MoveFileExW (Address: 0x180082428)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180082438)
DuplicateHandle (Address: 0x180082440)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180082460)
HeapAlloc (Address: 0x180082450)
HeapFree (Address: 0x180082458)

api-ms-win-core-heap-l2-1-0.dll

GlobalFree (Address: 0x180082478)
LocalAlloc (Address: 0x180082488)
LocalFree (Address: 0x180082470)
LocalReAlloc (Address: 0x180082480)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180082498)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x1800824a8)
GetOverlappedResult (Address: 0x1800824b0)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

CreateMailslotA (Address: 0x1800824c8)
SetMailslotInfo (Address: 0x1800824c0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800824f8)
FreeLibrary (Address: 0x1800824d8)
GetModuleFileNameW (Address: 0x1800824e0)
GetModuleHandleW (Address: 0x180082508)
GetProcAddress (Address: 0x1800824f0)
LoadLibraryExW (Address: 0x180082500)
LoadStringW (Address: 0x1800824e8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180082518)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x180082530)
VirtualProtect (Address: 0x180082528)
VirtualQuery (Address: 0x180082538)

api-ms-win-core-perfcounters-l1-1-0.dll

PerfCreateInstance (Address: 0x180082560)
PerfDecrementULongCounterValue (Address: 0x180082550)
PerfDeleteInstance (Address: 0x180082558)
PerfIncrementULongCounterValue (Address: 0x180082548)
PerfIncrementULongLongCounterValue (Address: 0x180082580)
PerfSetCounterSetInfo (Address: 0x180082568)
PerfStartProviderEx (Address: 0x180082570)
PerfStopProvider (Address: 0x180082578)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180082590)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x1800825a8)
GetCurrentProcess (Address: 0x1800825c8)
GetCurrentProcessId (Address: 0x1800825d0)
GetCurrentThread (Address: 0x1800825b8)
GetCurrentThreadId (Address: 0x1800825b0)
OpenThreadToken (Address: 0x1800825a0)
SetThreadStackGuarantee (Address: 0x1800825d8)
TerminateProcess (Address: 0x1800825c0)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1800825e8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180082600)
QueryPerformanceFrequency (Address: 0x1800825f8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180082648)
RegCreateKeyExA (Address: 0x180082660)
RegDeleteKeyExW (Address: 0x180082638)
RegDeleteValueW (Address: 0x180082630)
RegNotifyChangeKeyValue (Address: 0x180082628)
RegOpenKeyExA (Address: 0x180082610)
RegOpenKeyExW (Address: 0x180082650)
RegQueryInfoKeyW (Address: 0x180082618)
RegQueryValueExA (Address: 0x180082620)
RegQueryValueExW (Address: 0x180082640)
RegSetValueExW (Address: 0x180082658)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180082670)
RtlLookupFunctionEntry (Address: 0x180082680)
RtlVirtualUnwind (Address: 0x180082678)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180082698)
MultiByteToWideChar (Address: 0x180082690)
WideCharToMultiByte (Address: 0x1800826a0)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpA (Address: 0x1800826b0)
lstrcmpW (Address: 0x1800826b8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180082718)
AcquireSRWLockShared (Address: 0x180082750)
CreateEventW (Address: 0x1800826d8)
CreateSemaphoreExW (Address: 0x1800826c8)
DeleteCriticalSection (Address: 0x180082740)
EnterCriticalSection (Address: 0x180082738)
InitializeCriticalSection (Address: 0x1800826f8)
InitializeSRWLock (Address: 0x180082748)
LeaveCriticalSection (Address: 0x180082708)
OpenEventW (Address: 0x1800826e0)
ReleaseSemaphore (Address: 0x1800826f0)
ReleaseSRWLockExclusive (Address: 0x180082730)
ReleaseSRWLockShared (Address: 0x1800826e8)
ResetEvent (Address: 0x1800826d0)
SetEvent (Address: 0x180082720)
WaitForMultipleObjectsEx (Address: 0x180082710)
WaitForSingleObject (Address: 0x180082728)
WaitForSingleObjectEx (Address: 0x180082700)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x180082760)
Sleep (Address: 0x180082768)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x180082788)
GetLocalTime (Address: 0x1800827b0)
GetSystemInfo (Address: 0x1800827a0)
GetSystemTimeAsFileTime (Address: 0x180082780)
GetSystemWindowsDirectoryW (Address: 0x180082778)
GetTickCount (Address: 0x180082790)
GetTickCount64 (Address: 0x1800827a8)
GetVersionExW (Address: 0x180082798)

api-ms-win-core-sysinfo-l1-2-0.dll

SetComputerNameExW (Address: 0x1800827c0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolCleanupGroup (Address: 0x1800827f0)
CloseThreadpoolCleanupGroupMembers (Address: 0x1800827f8)
CloseThreadpoolTimer (Address: 0x1800827d8)
CloseThreadpoolWork (Address: 0x1800827e8)
CreateThreadpoolCleanupGroup (Address: 0x180082800)
CreateThreadpoolTimer (Address: 0x180082818)
CreateThreadpoolWork (Address: 0x180082810)
SetThreadpoolTimer (Address: 0x1800827e0)
SubmitThreadpoolWork (Address: 0x180082808)
WaitForThreadpoolTimerCallbacks (Address: 0x1800827d0)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

QueueUserWorkItem (Address: 0x180082830)
UnregisterWaitEx (Address: 0x180082828)

api-ms-win-core-threadpool-private-l1-1-0.dll

RegisterWaitForSingleObjectEx (Address: 0x180082840)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x180082850)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180082998)
_local_unwind (Address: 0x1800829a0)
_o___std_type_info_destroy_list (Address: 0x180082978)
_o___stdio_common_vsnwprintf_s (Address: 0x180082970)
_o___stdio_common_vsprintf (Address: 0x180082968)
_o___stdio_common_vsprintf_s (Address: 0x180082960)
_o___stdio_common_vswprintf (Address: 0x180082958)
_o___stdio_common_vswprintf_s (Address: 0x180082950)
_o__callnewh (Address: 0x180082948)
_o__cexit (Address: 0x180082940)
_o__configure_narrow_argv (Address: 0x180082938)
_o__execute_onexit_table (Address: 0x180082930)
_o__initialize_narrow_environment (Address: 0x180082928)
_o__initialize_onexit_table (Address: 0x180082920)
_o__itoa_s (Address: 0x180082860)
_o__ltoa (Address: 0x180082868)
_o__seh_filter_dll (Address: 0x180082870)
_o__stricmp (Address: 0x180082878)
_o__strnicmp (Address: 0x180082880)
_o__ultoa_s (Address: 0x180082888)
_o__ultow (Address: 0x180082890)
_o__ultow_s (Address: 0x180082898)
_o__wcsicmp (Address: 0x1800828a0)
_o__wcslwr (Address: 0x1800828a8)
_o__wcsnicmp (Address: 0x1800829b8)
_o_free (Address: 0x1800828b8)
_o_isprint (Address: 0x1800828c0)
_o_malloc (Address: 0x1800828c8)
_o_qsort (Address: 0x1800828d0)
_o_rand_s (Address: 0x1800828d8)
_o_strcat_s (Address: 0x1800828e0)
_o_strcpy_s (Address: 0x1800828e8)
_o_towupper (Address: 0x1800828f0)
_o_wcscat_s (Address: 0x1800828f8)
_o_wcscpy_s (Address: 0x180082900)
_o_wcsncpy_s (Address: 0x180082908)
_o_wcstoul (Address: 0x180082910)
memcmp (Address: 0x1800829a8)
memcpy (Address: 0x1800829b0)
memmove (Address: 0x1800828b0)
strchr (Address: 0x180082918)
wcschr (Address: 0x180082990)
wcsrchr (Address: 0x180082988)
wcsstr (Address: 0x180082980)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1800829d0)
_initterm_e (Address: 0x1800829c8)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1800829f0)
wcscmp (Address: 0x1800829e8)
wcsspn (Address: 0x1800829e0)

api-ms-win-eventlog-legacy-l1-1-0.dll

DeregisterEventSource (Address: 0x180082a00)
RegisterEventSourceW (Address: 0x180082a10)
ReportEventW (Address: 0x180082a08)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x180082a28)
PowerSettingUnregisterNotification (Address: 0x180082a20)

api-ms-win-security-activedirectoryclient-l1-1-0.dll

DsBindWithSpnExW (Address: 0x180082a58)
DsCrackNamesW (Address: 0x180082a38)
DsFreeDomainControllerInfoW (Address: 0x180082a50)
DsFreeNameResultW (Address: 0x180082a40)
DsGetDomainControllerInfoW (Address: 0x180082a48)
DsUnBindW (Address: 0x180082a60)

api-ms-win-security-activedirectoryclient-l1-1-1.dll

DsFreeNgcKey (Address: 0x180082a80)
DsReadNgcKeyW (Address: 0x180082a70)
DsWriteNgcKeyW (Address: 0x180082a78)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x180082a90)
AllocateAndInitializeSid (Address: 0x180082a98)
FreeSid (Address: 0x180082aa0)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountSidW (Address: 0x180082ab0)
LsaEnumerateTrustedDomains (Address: 0x180082ab8)

api-ms-win-service-core-l1-1-0.dll

SetServiceStatus (Address: 0x180082ac8)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x180082ae8)
OpenSCManagerW (Address: 0x180082ae0)
OpenServiceW (Address: 0x180082ad8)

api-ms-win-service-management-l2-1-0.dll

QueryServiceConfigW (Address: 0x180082af8)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x180082b10)
RegisterServiceCtrlHandlerW (Address: 0x180082b08)

CRYPT32.dll

CertCreateCertificateContext (Address: 0x180081f50)
CertFreeCertificateContext (Address: 0x180081f48)

cryptdll.dll

CDGetIntegrityVect (Address: 0x180082b28)
CDLocateCheckSum (Address: 0x180082b20)
CDLocateCSystem (Address: 0x180082b30)

gmsaclient.dll

GMSAAdd (Address: 0x180082b50)
GMSACheckIfExistsInAD (Address: 0x180082b60)
GMSACleanup (Address: 0x180082b68)
GMSADelete (Address: 0x180082b70)
GMSAGetPassword (Address: 0x180082b58)
GMSAInit (Address: 0x180082b48)
GMSARefreshPasswords (Address: 0x180082b40)

logoncli.dll

I_DsUpdateReadOnlyServerDnsRecords (Address: 0x180082b80)
I_NetChainSetClientAttributes (Address: 0x180082c28)
I_NetChainSetClientAttributes2 (Address: 0x180082ba0)
I_NetGetForestTrustInformation (Address: 0x180082bf8)
I_NetLogonGetCapabilities (Address: 0x180082ba8)
I_NetLogonGetDomainInfo (Address: 0x180082b90)
I_NetLogonSamLogoff (Address: 0x180082bd8)
I_NetLogonSamLogon (Address: 0x180082be0)
I_NetLogonSamLogonEx (Address: 0x180082c08)
I_NetLogonSamLogonWithFlags (Address: 0x180082c00)
I_NetLogonSendToSam (Address: 0x180082bd0)
I_NetServerAuthenticate (Address: 0x180082c20)
I_NetServerAuthenticate2 (Address: 0x180082bb8)
I_NetServerAuthenticate3 (Address: 0x180082bc0)
I_NetServerGetTrustInfo (Address: 0x180082be8)
I_NetServerPasswordSet (Address: 0x180082c18)
I_NetServerPasswordSet2 (Address: 0x180082c10)
I_NetServerReqChallenge (Address: 0x180082bb0)
NetGetDCName (Address: 0x180082b98)
NlBindingAddServerToCache (Address: 0x180082b88)
NlBindingRemoveServerFromCache (Address: 0x180082bf0)
NlBindingSetAuthInfo (Address: 0x180082bc8)

LSASRV.dll

LsaICallPackage (Address: 0x1800820f0)
LsaICallPackagePassthrough (Address: 0x180082110)
LsaIExtractTargetInfo (Address: 0x1800820b0)
LsaIFilterInboundNamespace (Address: 0x1800820a8)
LsaIFilterNamespace (Address: 0x180081ff8)
LsaIFilterSids (Address: 0x180082100)
LsaIForestTrustFindMatch (Address: 0x180082090)
LsaIFree_LSAP_SITE_INFO (Address: 0x180081fd0)
LsaIFree_LSAP_SITENAME_INFO (Address: 0x180081f90)
LsaIFree_LSAP_SUBNET_INFO (Address: 0x180081f88)
LsaIFree_LSAPR_CR_CIPHER_VALUE (Address: 0x180082088)
LsaIFree_LSAPR_POLICY_INFORMATION (Address: 0x180082038)
LsaIFree_LSAPR_TRUSTED_DOMAIN_INFO (Address: 0x180082000)
LsaIFree_LSAPR_TRUSTED_ENUM_BUFFER_EX (Address: 0x180081fb8)
LsaIFree_LSAPR_UNICODE_STRING_BUFFER (Address: 0x1800820b8)
LsaIFreeFilterInboundNamespaceResult (Address: 0x1800820a0)
LsaIFreeForestTrustInfo (Address: 0x180082050)
LsaIFreeHeap (Address: 0x180082030)
LsaIFreeReturnBuffer (Address: 0x1800820f8)
LsaIGetCcgClient (Address: 0x1800820e8)
LsaIGetClientOsInfo (Address: 0x180081fa0)
LsaIGetForestTrustInformation (Address: 0x180082070)
LsaIGetNbAndDnsDomainNames (Address: 0x180082048)
LsaIGetSiteName (Address: 0x180081f68)
LsaIInitializeNetlogonFuncPtrs (Address: 0x180081f70)
LsaIIsContainerized (Address: 0x1800820d8)
LsaIIsDsPaused (Address: 0x180081f78)
LsaIIsInEmulatedDomainJoinMode (Address: 0x180082058)
LsaINoMoreWin2KDomain (Address: 0x180082108)
LsaINotifyNetlogonParametersChangeW (Address: 0x180081f80)
LsaIOpenPolicyTrusted (Address: 0x180082010)
LsaIQueryForestTrustInfo (Address: 0x180081fe0)
LsaIQuerySiteInfo (Address: 0x180081fc8)
LsaIQuerySubnetInfo (Address: 0x180081f60)
LsaIRegisterPolicyChangeNotificationCallback (Address: 0x180081fc0)
LsaIReplicateClientObject (Address: 0x180081f98)
LsaISafeMode (Address: 0x180081fe8)
LsaISetClientDnsHostName (Address: 0x180082020)
LsaITransformAuthorizationData (Address: 0x1800820c0)
LsaIUnregisterAllPolicyChangeNotificationCallback (Address: 0x180081fa8)
LsaIUpdateForestTrustInformation (Address: 0x180082068)
LsaIValidateTargetInfo (Address: 0x180082098)
LsaIVerifyCachability (Address: 0x180082028)
LsarClose (Address: 0x180082040)
LsarCreateSecret (Address: 0x1800820c8)
LsarDeleteObject (Address: 0x1800820e0)
LsarEnumerateTrustedDomainsEx (Address: 0x180081fd8)
LsarOpenPolicy (Address: 0x180082060)
LsarOpenSecret (Address: 0x180082078)
LsarQueryInformationPolicy (Address: 0x180082018)
LsarQuerySecret (Address: 0x180082080)
LsarQueryTrustedDomainInfoByName (Address: 0x180082008)
LsarSetInformationPolicy (Address: 0x180081fb0)
LsarSetSecret (Address: 0x1800820d0)
LsarSetTrustedDomainInfoByName (Address: 0x180081ff0)

lsass.exe

LsaGetInterface (Address: 0x180082c38)

ntdll.dll

DbgPrint (Address: 0x180082d20)
EtwEventRegister (Address: 0x180082ca8)
EtwEventSetInformation (Address: 0x180082cb0)
EtwEventUnregister (Address: 0x180082ca0)
EtwEventWriteTransfer (Address: 0x180082cc8)
EtwGetTraceEnableFlags (Address: 0x180082cd0)
EtwGetTraceEnableLevel (Address: 0x180082f38)
EtwGetTraceLoggerHandle (Address: 0x180082cc0)
EtwLogTraceEvent (Address: 0x180082d40)
EtwRegisterTraceGuidsW (Address: 0x180082cd8)
EtwTraceMessage (Address: 0x180082cb8)
EtwUnregisterTraceGuids (Address: 0x180082e98)
NtCancelIoFile (Address: 0x180082c80)
NtClose (Address: 0x180082c50)
NtCreateEvent (Address: 0x180082ce0)
NtCreateFile (Address: 0x180082c88)
NtDeviceIoControlFile (Address: 0x180082c90)
NtImpersonateAnonymousToken (Address: 0x180082d70)
NtOpenEvent (Address: 0x180082ce8)
NtOpenFile (Address: 0x180082c70)
NtOpenProcessToken (Address: 0x180082e40)
NtOpenThreadToken (Address: 0x180082f28)
NtQueryInformationToken (Address: 0x180082dd8)
NtQuerySystemTime (Address: 0x180082de8)
NtSetEvent (Address: 0x180082cf0)
NtSetInformationThread (Address: 0x180082d78)
RtlAcquireResourceExclusive (Address: 0x180082eb0)
RtlAcquireResourceShared (Address: 0x180082d00)
RtlAddAce (Address: 0x180082e10)
RtlAllocateHeap (Address: 0x180082e68)
RtlAnsiStringToUnicodeString (Address: 0x180082de0)
RtlCompareMemoryUlong (Address: 0x180082db0)
RtlCompareUnicodeString (Address: 0x180082d38)
RtlCompareUnicodeStrings (Address: 0x180082c60)
RtlConvertSidToUnicodeString (Address: 0x180082d18)
RtlCopySid (Address: 0x180082d50)
RtlCopyUnicodeString (Address: 0x180082f30)
RtlCreateAcl (Address: 0x180082e08)
RtlCreateSecurityDescriptor (Address: 0x180082e18)
RtlCreateUnicodeString (Address: 0x180082ed8)
RtlDeleteCriticalSection (Address: 0x180082e78)
RtlDeleteElementGenericTableAvl (Address: 0x180082d90)
RtlDeleteResource (Address: 0x180082ea0)
RtlDeleteSecurityObject (Address: 0x180082e50)
RtlDowncaseUnicodeString (Address: 0x180082d58)
RtlDuplicateUnicodeString (Address: 0x180082c98)
RtlEnterCriticalSection (Address: 0x180082ed0)
RtlEqualComputerName (Address: 0x180082eb8)
RtlEqualDomainName (Address: 0x180082ec0)
RtlEqualSid (Address: 0x180082ef0)
RtlEqualUnicodeString (Address: 0x180082d28)
RtlFreeHeap (Address: 0x180082e70)
RtlFreeUnicodeString (Address: 0x180082ee8)
RtlGetNtProductType (Address: 0x180082ef8)
RtlImageNtHeader (Address: 0x180082e88)
RtlInitAnsiString (Address: 0x180082e60)
RtlInitializeCriticalSection (Address: 0x180082e80)
RtlInitializeGenericTableAvl (Address: 0x180082d88)
RtlInitializeResource (Address: 0x180082cf8)
RtlInitializeSid (Address: 0x180082e00)
RtlInitString (Address: 0x180082dc0)
RtlInitUnicodeString (Address: 0x180082f00)
RtlInitUnicodeStringEx (Address: 0x180082c68)
RtlInsertElementGenericTableAvl (Address: 0x180082da0)
RtlIntegerToUnicodeString (Address: 0x180082d30)
RtlIpv4AddressToStringExW (Address: 0x180082d60)
RtlIpv6AddressToStringExW (Address: 0x180082d68)
RtlLeaveCriticalSection (Address: 0x180082ec8)
RtlLengthRequiredSid (Address: 0x180082df8)
RtlLengthSid (Address: 0x180082f08)
RtlLookupElementGenericTableAvl (Address: 0x180082d98)
RtlNewSecurityObject (Address: 0x180082e48)
RtlNtStatusToDosError (Address: 0x180082d80)
RtlNumberGenericTableElementsAvl (Address: 0x180082da8)
RtlOemStringToUnicodeString (Address: 0x180082dd0)
RtlOemToUnicodeN (Address: 0x180082c78)
RtlReleaseResource (Address: 0x180082ea8)
RtlSetDaclSecurityDescriptor (Address: 0x180082e30)
RtlSetGroupSecurityDescriptor (Address: 0x180082e28)
RtlSetOwnerSecurityDescriptor (Address: 0x180082e20)
RtlSetSaclSecurityDescriptor (Address: 0x180082e38)
RtlSubAuthorityCountSid (Address: 0x180082c48)
RtlSubAuthoritySid (Address: 0x180082f18)
RtlSystemTimeToLocalTime (Address: 0x180082d08)
RtlTimeToSecondsSince1970 (Address: 0x180082c58)
RtlTimeToSecondsSince1980 (Address: 0x180082e58)
RtlTimeToTimeFields (Address: 0x180082d10)
RtlUniform (Address: 0x180082df0)
RtlUpcaseUnicodeString (Address: 0x180082e90)
RtlUpcaseUnicodeStringToOemString (Address: 0x180082f40)
RtlUpcaseUnicodeToOemN (Address: 0x180082ee0)
RtlValidSid (Address: 0x180082f10)
RtlxAnsiStringToUnicodeSize (Address: 0x180082f20)
RtlxOemStringToUnicodeSize (Address: 0x180082dc8)
RtlxUnicodeStringToOemSize (Address: 0x180082db8)
WinSqmSetDWORD (Address: 0x180082d48)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x180082130)
I_RpcMapWin32Status (Address: 0x1800821a0)
I_RpcServerInqRemoteConnAddress (Address: 0x180082160)
NdrClientCall3 (Address: 0x1800821e8)
NdrServerCall2 (Address: 0x180082200)
NdrServerCallAll (Address: 0x180082220)
RpcBindingFree (Address: 0x1800821d8)
RpcBindingFromStringBindingA (Address: 0x1800821f8)
RpcBindingFromStringBindingW (Address: 0x180082198)
RpcBindingInqAuthClientW (Address: 0x180082140)
RpcBindingInqMaxCalls (Address: 0x1800821b0)
RpcBindingServerFromClient (Address: 0x180082148)
RpcBindingSetAuthInfoExW (Address: 0x1800821e0)
RpcBindingSetAuthInfoW (Address: 0x180082180)
RpcBindingToStringBindingW (Address: 0x1800821c0)
RpcBindingVectorFree (Address: 0x180082208)
RpcCancelThread (Address: 0x180082168)
RpcEpRegisterW (Address: 0x180082210)
RpcErrorEndEnumeration (Address: 0x180082138)
RpcErrorGetNextRecord (Address: 0x180082150)
RpcErrorStartEnumeration (Address: 0x180082158)
RpcExceptionFilter (Address: 0x1800821c8)
RpcImpersonateClient (Address: 0x180082218)
RpcMgmtSetCancelTimeout (Address: 0x180082170)
RpcRevertToSelf (Address: 0x180082120)
RpcServerInqBindings (Address: 0x1800821b8)
RpcServerInqCallAttributesW (Address: 0x180082178)
RpcServerRegisterAuthInfoW (Address: 0x180082248)
RpcServerRegisterIf3 (Address: 0x180082260)
RpcServerUnregisterIf (Address: 0x180082240)
RpcServerUseProtseqEpExA (Address: 0x180082228)
RpcServerUseProtseqEpW (Address: 0x180082258)
RpcServerUseProtseqExW (Address: 0x180082238)
RpcStringBindingComposeA (Address: 0x1800821a8)
RpcStringBindingComposeW (Address: 0x180082250)
RpcStringBindingParseW (Address: 0x1800821d0)
RpcStringFreeA (Address: 0x180082188)
RpcStringFreeW (Address: 0x1800821f0)
UuidCreate (Address: 0x180082128)
UuidEqual (Address: 0x180082230)
UuidToStringA (Address: 0x180082190)

SAMSRV.dll

SamIConnect (Address: 0x180082328)
SamIDecodeClaimsBlobToAuthz (Address: 0x180082280)
SamIFree_SAMPR_DOMAIN_INFO_BUFFER (Address: 0x180082310)
SamIFree_SAMPR_ULONG_ARRAY (Address: 0x1800822b0)
SamIFree_SAMPR_USER_INFO_BUFFER (Address: 0x180082278)
SamIFree_UserInternal6Information (Address: 0x1800822e8)
SamIFreeAuthzSecurityAttributesInfo (Address: 0x180082290)
SamIFreeClaimsBlob (Address: 0x1800822a0)
SamIFreeSidAndAttributesList (Address: 0x1800822e0)
SamIFreeSidArray (Address: 0x180082288)
SamIGetResourceGroupMembershipsTransitive (Address: 0x180082298)
SamIGetUserLogonInformation2 (Address: 0x1800822f8)
SamIGetUserLogonInformationEx (Address: 0x180082270)
SamIMixedDomain (Address: 0x180082340)
SamINetLogonPing (Address: 0x1800822a8)
SamIQueryAccountSecretsCachability (Address: 0x1800822d8)
SamIQueryCapabilities (Address: 0x180082320)
SamIResetBadPwdCountOnPdc (Address: 0x180082300)
SamISetMachinePassword (Address: 0x1800822c8)
SamISetPasswordInfoOnDc (Address: 0x1800822d0)
SamIUpdateLogonStatistics (Address: 0x1800822f0)
SampDsIsRunning (Address: 0x180082308)
SamrCloseHandle (Address: 0x180082338)
SamrGetAliasMembership (Address: 0x1800822b8)
SamrOpenDomain (Address: 0x180082330)
SamrQueryInformationDomain (Address: 0x180082318)
SamrSetInformationUser (Address: 0x1800822c0)

USERENV.dll

RegisterGPNotification (Address: 0x180082350)
UnregisterGPNotification (Address: 0x180082358)